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Abstract. The symmetric interaction combinators are an equally expressive variant of 
Lafont's interaction combinators. They are a graph-rewriting model of deterministic com- 
putation. We define two notions of observational equivalence for them, analogous to normal 
form and head normal form equivalence in the lambda-calculus. Then, we prove a full ab- 
straction result for each of the two equivalences. This is obtained by interpreting nets as 
certain subsets of the Cantor space, called edifices, which play the same role as Bohm trees 
in the theory of the lambda-calculus. 



Introduction 



A foundational study of interaction nets. Lafont's interaction nets |Laf90| are a power- 
ful and versatile model of deterministic computation, derived from the proof nets of Girard's 
linear logic |Gir87l IGir96^ ILaf95] . Interaction nets are characterized by the atomicity and 
locality of their rewriting rules. As in Turing machines, computational steps are elementary 
enough to be considered as constant-time operations, but, unlike Turing machines, several 
steps can be executed in parallel, i.e., interaction nets actually model a kind of distributed 
computation. 

Several interesting applications of interaction nets exist. The most notable ones are 
implementations of optimal evaluators for the A-calculus [?. IMac04] . but efficient evaluation 
of other functional programming languages using richer data structures is also possible with 
interaction nets [Mac05] . 

However, so far the practical aspects of this computational model have arguably received 
much more attention than the strictly theoretical ones. With the exception of Lafont's work 
on the interaction combinators |Laf97j and Fernandez and Mackie's work on operational 
equivalence [FM03j . no foundational study of interaction nets can be found in the existing 
literature. For example, until very recently |Maz07a] . no denotational semantics had been 
proposed for interaction nets. 
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This work aims precisely at studying and expanding the theory of interaction nets, in 
particular of the symmetric interaction combinators. These latter are especially interesting 
because of their universality: any interaction net system can be translated in the symmet- 
ric interaction combinators |Laf97j . Therefore, within the graph-rewriting paradigm given 
by interaction nets, the symmetric interaction combinators stand out as a prototypical 
language, just like the A-calculus is the prototypical language of the functional paradigm. 

More specifically, the contribution of this work is twofold, and can be seen as a method- 
ology for addressing the following two questions: 

Observational equivalence: Given two nets in the system of the symmetric interaction 
combinators, when can we say that they behave in the same way? 

Denotational semantics and full abstraction: Any answer to the above question yields 
an equivalence on nets; can we denotationally characterize this equivalence? In other 
words, can we find an abstract interpretation of the syntax so that such equivalence 
becomes an equality? 

Observations and contexts. The first question is a central one in all programming lan- 
guages. Indeed, any programmer is aware that, given two syntactically different programs, 
it may as well be that they "do the same thing", i.e., that one can be replaced by the other 
without anyone noticing the difference. Of course, the heart of the question lies in what 
differences we judge worth noticing: the final result of executing a program, the time it 
takes to obtain such result, etc. Different choices will of course lead to different notions of 
"doing the same thing" . 

In any case, the key notion is that of observation: the program interacts with an 
environment, and we observe the outcome, based on our choice of what we consider relevant 
to be observed. If our two programs yield the same observations upon interacting with all 
possible environments, it is fair to say that, as far as we are concerned, they "do the same 
thing"; more formally, we say that they are ohservationally equivalent, according to our 
chosen notion of observation. 

For functional programming languages, and in particular for the A-calculus, Mor- 
ris [Mor68j was the first to propose the now widely accepted idea that an environment 
is a context. In this way, observations are internalized, i.e., they may be made directly on 
programs, because, given a program P and a context C, C[P] is still a program. 

In interaction nets, there is a very natural notion of context for a net ^: it is simply 
another net C whose interface is big enough so that ^ can be plugged into it, forming a 
new net C[//]. Morris' idea can therefore be straightforwardly applied in our framework. 

Internal separation and observable axioms. In order to choose what to observe in our 
nets, we draw inspiration from our previous work on internal separation [Maz07b] . in which 
we proved a result similar to the celebrated Bohm's theorem for the A-calculus |Boh68j . 
Bohm's theorem states the following: given two /^r^-normal A-terms T,U, T ^ U implies 
that there exists a context C such that C[T] — >^ x and C[U] — >^ y, where x and y are two 
different variables. 

A consequence of Bohm's result is that it is impossible to equate two distinct (3rj-normal 
forms, unless one equates all X-terms. This makes us better understand the importance of 
Bohm's theorem, because it brings forth its negative content: as underscored for example 
by Giuseppe Longo |Lon05] . negative results are crucial in the development of a theory, 
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since they witness the presence of a structure in the underlying objects. If "everything is 
possible", then the objects of our theory are shapeless, we can tamper with them at will, 
and the theory looses any scientific interest. 

In the case of the symmetric interaction combinators, internal separation (c/. Theo- 
rem [TTTH]) cannot be realized using two arbitrary nets (by contrast, in the A-calculus, x and 
y may be replaced by two arbitrary distinct A-terms). Indeed, one of the two nets used 
contains a special kind of connection, which we call observable axiom, while the other does 
not. Since identifying these two nets induces the identification of all nets, we are led to take 
the presence of observable axioms as the key phenomenon to observe. 

Axiom-equivalences. The discovery of observable axioms in interaction nets is the back- 
bone of the development of our theory of observational equivalence. Indeed, we have several 
results hinting to the fact that observable axioms are analogous to head variables; these oc- 
cupy an arguably important place in the theory of the A-calculus, so it is perhaps not 
surprising that we give observable axioms a central role in interaction nets too. 

Furthermore, observable axioms are related to a certain kind of paths of Girard's ge- 
ometry of interaction [Gir89j . as reformulated by Lafont for the (symmetric) interaction 
combinators |Laf97j . In particular, it is possible to show (c/. Sect, \2.2h that the observ- 
able axioms generated by a net in the course of its reduction correspond to its execution 
paths |DR95| : these are the paths which are preserved by reduction, and are hence present 
in every reduct. In some sense, each execution path describes a portion of information pro- 
duced by the computation of a net; in particular, if a net is normalizable, then its execution 
paths describe exactly its normal form. This idea of approximation, which is also already 
present in Bohm trees, is another way of looking at observable axioms as meaningful objects 
to study the behavior of a net (c/. Sect. 15. 2p . 

We thus introduce observable nets and finitarily observable nets: the first are nets 
which, in the course of their reduction, develop at least one observable axiom; the second 
are observable nets which develop only finitely many of them. It is useful to keep in mind an 
analogy with the A-calculus: observable nets are similar to A-terms having a head normal 
form, and finitarily observable nets are akin to normalizable A-terms. In the first case, we 
may additionally introduce the notion of solvable net, and prove that solvable and observable 
nets coincide, just like solvable A-terms coincide with A-terms having a head normal form. In 
the second case, the correspondence is somewhat looser, because the symmetric combinators 
already have a notion of normalizable net, and it does not coincide with that of finitarily 
observable net. Nevertheless, there are several facts supporting this analogy. 

The notions of observable and finitarily observable net can be used to define two ob- 
servational equivalences on nets: axiom- equivalence and finitary axiom- equivalence. The 
first one is similar to head normal form equivalence (hnf-equivalence) in the A-calculus (two 
A-terms T,U are hnf-equivalent iff, for every context C, C[T] is head-normalizable iff C[U] 
is) . The second one is similar to normal form equivalence (nf-equivalence) in the A-calculus 
(two A-terms T, U are nf-equivalent iff, for every context C, C[T] is normalizable iff C[U] 
is). By "similar" we mean that finitary axiom-equivalence is strictly included in axiom- 
equivalence, as nf-equivalence is strictly included in hnf-equivalence in the A-calculus, and 
that the examples proving strict inclusion are all related to a phenomenon similar to infinite 
ry-expansion [Wad 76] . as is the case for the A-calculus. Moreover, after transporting from 
the A-calculus to the symmetric interaction combinators the concepts of theory and sensible 
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theory {cf. Sect. IS.Sh . axiom-equivalence can be shown to be a maximal consistent theory, 
indeed the greatest consistent sensible theory, just like hnf-equivalence. 

Our axiom-equivalences are not the only existing observational equivalences for the 
symmetric interaction combinators; in particular, Fernandez and Mackie |FM03j proposed 
another notion of observational equivalence, based on visible nets. This equivalence, which 
seems to correspond to weak head normal form equivalence (whnf-equivalence) in the 
A-calculus, can be proved to be strictly stronger, i.e., more discriminative, than our finitary 
axiom-equivalence, and hence than axiom-equivalence {cf. Sect. 15.1]) . This is in accord with 
the A-calculus analogy: whnf-equivalence is strictly included in nf- and hnf-equivalence. 

Equivalence as equality. The second part of our work starts with the development of a 
denotational semantics of the symmetric interaction combinators. Denotational semantics 
originated in the late 1960's with the work of Scott and Strachey |SS71l [Sco76j . Its goal is 
to model the syntax of a programming language by means of a more abstract mathematical 
structure, on which a broader range of tools and proof techniques are available. In this way, 
one may be able to prove results about the language which would be very difficult, or even 
impossible, to prove by syntactic methods only. 

In a nutshell, we could say that the ultimate goal of denotational semantics is to trans- 
form equivalences into equalities. A typical example is precisely that of observational equiv- 
alence, as discussed above. If a denotational semantics gives the same interpretation to two 
programs exactly when they are observationally equivalent, then it is said to he fully abstract 
with respect to the given observational equivalence. Finding a fully abstract denotational 
semantics can be a very hard problem: a notable example is that of PCF, a A-calculus-like 
functional language for which completely new game-semantic models had to be developed 
to achieve full abstraction |A JMOOl [HQOO] . 

In the A-calculus, both nf- and hnf-equivalence have been abstractly characterized in 
several different ways: Hyland |IIyl76| proved that two terms are nf-equivalent iff their Bolim 
trees are equal up to ry-equi valence, and went on to prove that nf-equivalence coincides with 
equality in Plotkin's Puj model |Plo72j : Wadsworth |Wad76j obtained similar results for 
hnf-equivalence, showing that two terms are hnf-equivalent iff their Bohm trees are equal 
up to infinite ry-expansion, and that this equivalence corresponds to equality in Scott's D^o 
model |Sco76j . Shortly after, Nakajima |Nak75j introduced a similar characterization of 
hnf-equivalence in terms of what are now known as Nakajima trees. 

Edifices, the Cantor topology, and full abstraction. Besides the description of a new 
theory of observational equivalence for interaction nets, the other principal contribution 
of the present work is the introduction of edifices, which play the same role as Bohm or 
Nakajima trees, in that they provide a fully abstract model of the two axiom-equivalences 
mentioned above. 

The starting point for defining edifices is the same as that of Bohm trees, reflecting 
the analogy between observable axioms and head variables: just like the Bohm tree of 
a A-term T is basically the collection of the head variables appearing in the reducts of T 
(with the additional information concerning their hierarchical structure and the abstractions 
preceding them), the edifice of a net ^ is built from the collection of all observable axioms 
appearing in the reducts of 
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Nevertheless, the parallehsm of interaction nets, unmatched in the A-calculus, induces 
some fundamental differences between the two contructions: in fact, apart from collecting 
the information concerning the position of observable axioms within the net in which they 
appear (analogous to the abstractions preceding a head variable), no evident hierarchical 
structure emerges for observable axioms (although some kind of structure might be attached 
to them, as briefly discussed in Sect. 15. 4p . This is why edifices are not at all trees. Still, 
just like the Bohm tree of a A-term, the edifice of a net is an invariant of reduction in the 
symmetric interaction combinators (Proposition 13. 19|) . 

To achieve full abstraction, we endow edifices with a topological structure, which turns 
them into subsets of the Cantor space. In the case of finitary axiom-equivalence, this is 
needed for technical purposes: in fact, edifices characterize this equivalence as plain sets, 
i.e., two nets are finitarily axiom-equivalent iff their edifice is the same, independently of 
any topology attached to it; however, the only way we are able to prove this is through a 
topological property, namely the compactness of the edifices interpreting a certain class of 
nets (Proposition 14. 3( ). In the case of axiom-equivalence, topology plays a more fundamen- 
tal role: in fact, we prove that two nets are axiom-equivalent iff the topological closure of 
their edifices is the same; obviously, the notion of closure is meaningless without referring 
to a topology. This last result is particularly nice, because the phenomenon of infinite 
ry-expansion (which, as mentioned above, is also present in the symmetric interaction com- 
binators) receives a precise topological explanation. 

Another nice aspect of edifices is that they are quite interesting in their own right, 
independently of the symmetric interaction combinators. In fact, several results in our 
theory hold for wider classes of edifices than those which interpret nets. In particular, there 
is a notion of trace defined on edifices (Sect. 13. ip . which is completely general, and which 
reminds of the notion of composition of strategies in games semantics |AJM001 IHOOO] . 
When applied to the special case of edifices which interpret nets, the trace can be seen 
as an extension of the execution formula of the geometry of interaction, which works in 
all cases (c/. Proposition I3.16P : by contrast, Girard's original execution formula, and its 
rephrasing developed by Lafont for the symmetric interaction combinators, is only defined 
under certain normalizability assumptions. 

Acknowledgments. Many thanks to the anonymous referees for their useful comments 
and suggestions, and a special thanks to the editor Simona Ronchi della Rocca for her 
patience in waiting for the revised version of this paper. 

1. The Symmetric Interaction Combinators 

1.1. Nets. The symmetric interaction combinators, or, more simply, the symmetric com- 
binators, are an interaction net system |Laf901 ILaf97j . An interaction net is built out of 
cells and wires. Each cell has a number of ports, exactly one of which is principal, the other 
being auxiliary. In the case of the symmetric combinators, there are three kinds of cells: 
cells of type 5 and Q, which have two auxiliary ports, numbered by the integers 1 and 2, 
and cells of type e, which have no auxiliary ports. Cells of the first two kinds are called 
binary, while those of the latter kind are called nullary. 
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Figure 1: A net. 



Each wire has two extremities; each extremity may be attached to the port of a cell, 
so we can use wires to connect cells together. We also allow loops, which are wires whose 
extremities are attached one to the other. Wires which are not loops are called proper. 

A net is any configuration of cells and wires, such that each port of each cell is attached 
to the extremity of a wire. Note that a net may contain wires with one or both extremities 
not attached to any port of any cell; these unattached extremities will be called the free 
ports of the net. 

Nets are usually presented in graphical form, as in Fig. [TJ Binary cells are represented 
by triangles, nullary cells by circles; in both cases, the symbol denoting the kind of cell is 
written inside the figure representing it. For a binary cell, the principal port is depicted 
as one of the "tips" of the triangle representing it. The numbering of the auxiliary ports 
of binary cells is assigned clockwise: in particular, the auxiliary port number 1 of a binary 
cell is the left one if the cell is drawn with its principal port pointing towards the bottom 
of the picture, and it is the right one if the cell is drawn with its principal port pointing 
"up". Wires and loops are represented as... wires and loops, and the free ports appear 
as extremities of "pending" wires. For example, the net in Fig. [T]has 11 cells, of which 4 
nullary, 1 loop, 16 proper wires, and 7 free ports. 

The above description is precise enough to develop the rest of the paper, and almost all 
of the theory of interaction nets. However, a more formal definition can be given, by con- 
sidering an interaction net as the union of two structures: a labelled, directed hypergraph, 
and an undirected graph. The idea is that labelled and directed hyperedges correspond to 
cells, and undirected edges to wires. In what follows, we fix a denumerably infinite set of 
ports, which we assume contains the positive integers. 

Definition 1.1 (Wire, cell, net). A wire is a set of ports of cardinality 1 or 2; in the first 
case, we speak of a loop, in the second case of a proper wire. We fix three symbols 6, e, C; 
we say that 5 and C are binary, while e is nullary. A cell is a tuple {a,pQ,pi, . . . ,pn) where 
a is a symbol, po,pi, . . . ,pn are ports, and n = 2 if a binary, or n = if a is nullary. In 
both cases, po is the principal port of the cell, while pi, . . . ,pn are the auxiliary ports. 

A net /i is a couple (Cells(^), Wires(//)), where Cells(/x) is a finite set of cells and Wires(/i) 
is a finite set of wires, satisfying the following: 

• each port appears at most twice in Cells(/i) U Wires(/x); 

• if a port appears in Cells(^) U Wires(^), then it appears in exactly one wire. 

The set of ports appearing in n is denoted by Ports(/u). A port appearing only once in 
Cells(/i) U Wires(//) is called free; the set of all free ports of fi is referred to as its interface. 
We shall always assume that if a net has n free ports, then its interface is {1, . . . , n}. 
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Figure 2: A generic active pair (left) and an example of vicious circle (right). 

Definition 1.2 (a-equivalence). A renaming for a net with n free ports is an injective 
function from ports to ports which is the identity on {1, ... , n}. Two nets are a-equivalent 
iff they are equal modulo a renaming. 

Nets are always considered modulo a-equivalence. In fact, observe that graphical rep- 
resentations equate exactly a-equivalent nets. As in most of the existing literature on 
interaction nets, we shall preferentially disregard Definition II. H in favor of more intuitive 
graphical notations. This is especially convenient for treating the dynamic aspects of nets, 
such as reduction (c/. Sect. II. 2| : however, for static aspects, it is sometimes quite convenient 
to use Definition 11.11 because it gives succinct, formal descriptions of the components of a 
net {e.g. ports, wires as sets of ports, etc.). 

Let us introduce some remarkable nets, which will be useful in the sequel: 
Wirings: A net containing no cell and no loop is called a wiring. Wirings are permutations 
of free ports; they are ranged over by uj. We shall often use uj also to denote a single 



E-nets: The e-net with n free ports, denoted by E.„, is the net consisting of n e cells; 

Trees: A tree is a net defined by induction as follows. A single e cell is a tree with no 
leaf, denoted by e; a proper wire is a tree with one leaf (it is arbitrary which of the two 
extremities is the root and which is the leaf), denoted by •; if ti,T2 are two trees with 
resp. ni,re2 leaves, and if q is a binary symbol, the net 



is a tree with ni -|- n2 leaves, denoted by a{Ti, T2). 

As the reader may have noticed, in the above picture we represented trees adopting 

the same graphical notations as cells. We shall avoid possible ambiguities by never using 

S, e, C to denote trees, and by using a, (3 exclusively to range over cell symbols, so that a 

triangle annotated with a or P will unambiguously represent a cell (or a tree consisting 

of a single cell, if the reader prefers). 
Active pairs: An active pair (Fig. O left) is a net consisting of two cells whose principal 

ports are connected by a wire. 
Vicious circles: — A vicious circle is either a loop, or a net consisting of n binary cells 

ci, . . . , c„ such that, for alliG{l,...,n— 1}, the principal port of q is connected to an 



wire. 
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auxiliary port of Cj+i, and the principal port of Cn is connected to an auxiliary port of 
ci. An example is given in Fig. [2] (right). 
It is also useful to identify two special sorts of wires in nets: 

Definition 1.3 (Axiom, cut, cut-free net). Let /i be a net, and uj = {p, q} a wire of fi. 
Proper axiom: We say that is a proper axiom if it is a proper wire and none of p, q is 

the principal port of a cell of 
Proper cut: We say that a; is a proper cut if it is a proper wire and both p and q are 

principal ports of cells of ^. 
Axiom-cut: We say that uj is an axiom-cut if it is a loop, or if i^i contains a tree r such 

that p is the root of r, and q one of its leaves. 
An axiom (resp. cut) of /x is either a proper axiom (resp. proper cut) or an axiom-cut; in 
the latter case, we refer to it as an improper axiom (resp. improper cut). We say that fj, is 
cut-free if it contains no cuts. 

As an example, consider the net in Fig. [H in which the reader should find 7 proper 
axioms, 2 proper cuts, and 2 axiom-cuts. Note that proper cuts are in one-to-one correspon- 
dence with active pairs. On the other hand, axiom-cuts are in many-to-one correspondence 
with vicious circles, i.e., an axiom-cut implies the presence of exactly one vicious circle, but 
a vicious circle implies the presence of at least one axiom-cut. Although the correspondence 
is one-to-one for the net in Fig. [H we have for instance that, despite having a single vicious 
circle, the net on the left in Fig. [2] contains 4 axiom-cuts. 

The following gives us a general understanding of the structure of cut-free nets: 

Lemma 1.4 (Canonical form of a cut-free net). Let u he a cut- free net with n free ports. 
Then, for each 1 < i < n there exist a unique tree Ti, and there exists a unique wiring tu 
such that 



Note the wiring drawn as a rectangle; in the sequel, this graphical notation will be used 
also to represent generic nets, but uj will always denote a wiring. Observe that all wires in uj 
are proper axioms; in fact, the above is the shape of a generic cut-free multiplicative proof 
net, with the axiom links in uj and the logical links in ri, . . . , r^, whence our terminology. 

A fundamental notion for developing the rest of the paper is that of context: 

Definition 1.5 (Context, test, feedback). Let /i be a net with n free ports. A context for 
is a net C with at least n free ports. We denote by C[fj] the application of C to /i, which is 
the net obtained by plugging the free port z of to the free port i of C, with i £ {1, . . . , n}. 
A test for is a particular context consisting of n trees ri , . . . , t„ such that the root of each 
Ti is the free port i. A feedback context for is a context a consisting of a wiring connecting 
some of the free ports of /i between them. 

In the sequel, when we use the notation C[fj] we implicitly assume that C is a context 
for /X, i.e., that it has enough ports so that /j, can be plugged into it. Moreover, we shall say 
that is a subnet of fi if there exists C such that /x = C[/x']. Using the above definitions, we 




Proof. By induction on the number of cells of u. 



□ 
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Figure 3: The interaction rules: annihilation (left) and commutation (right). In the anni- 
hilation, the right member is empty in case a = e. 

can concisely formulate a decomposition result which, combined with Lemma ll.4l uncovers 
the structure of a generic net: 

Lemma 1.6 (Decomposition). Let fi be a net. Then, there exists a cut-free net u and a 
feedback context a such that ^ = ct[u\. 

Proof. Simply let a contain all the proper cuts of ^, plus one axiom-cut for each vicious 
circle of /x, and let v be the subnet of ^ obtained by removing cr. □ 

Observe that the net v of Lemma 11.61 is unique as soon as /i does not contain vicious 
circles (or, equivalently, axiom-cuts). 

1.2. /3-reduction and r^-equivalence. The dynamics of interaction nets is based on the 
contextual rewriting of active pairs, which are thus analogous to redexes in the A-calculus. 
In the case of the symmetric combinators, the active pairs are rewritten according to the 
interaction rules of Fig. [3l the annihilations, concerning the interaction of two cells of the 
same type, and the commutations, concerning the interaction of two cells of different type. 

Definition 1.7 (/?-reduction and /3-equivalence) . j3 -reduction is the reflexive-transitive clo- 
sure of the relation defined as follows: given two nets /U, we set — /u' iff there exists 
C such that /i = C[/io]5 A*' = C'iA'o]' fJ'0,IJ''o match the left and right members of one of 
the rules of Fig. [3l respectively. We define ji v iff there exists o such that [x o and 
v^l a. 

Proposition 1.8 (Strong confluence). If ^ -^^ fi' and fj, -^p fj," with fi' ^ fi" , there exists 
V such that fi' v and fi" — >^ i'. Hence, the relation — >^ is confluent, and ~^ is an 
equivalence relation. 

Proof. Immediate: there are no critical pairs, because active pairs are always disjoint. □ 

We now give a few basic results concerning /J-reduction. The first two are generalizations 
of the annihilation and commutation rules: 

Lemma 1.9. Let t be a tree. Then, we have 
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Proof. By induction on the structure of r. 



□ 



Lemma 1.10. Let a, (3 range over binary symbols, with a ^ (3. Let A be a tree not 
containing j3 cells, and let B be a tree not containing a cells. Then, we have 




Proof. By double induction on the structures of A and B. 

The following is an easy corollary of Lemmas 11.41 11.91 and ll.lUt 



□ 



Lemma 1.11 (Duplication). Let a be a binary symbol, let v be a cut- free net containing 
no a cell, and let t be a tree containing only a cells. Then, we have 



Observe that the only cut-free net with an empty interface is the empty net. Then, the 
next result shows, as a special case, that cut-free nets can be freely erased: 

Lemma 1.12 (Erasing). Let u be a cut-free net, and let /x be any net obtained from u by 
plugging any number of e cells to its free ports, as follows: 



M = 




Then, there exists a cut- free net u' such that /x — >^ u' . 

Proof. An immediate consequence of Lemmas 11.41 and 11.101 □ 

We now introduce r/-equivalence, which is similar to the homonymous relation in the 
A-calculus, with an essential difference: in the symmetric combinators r/-equivalence cannot 
be presented as the symmetrization of a rewriting relation, like /3-equivalence. In fact, one 
of the equations defining it (namely the r/i equation applied to binary cells, cf. Fig. S]) 
cannot be meaningfully oriented and transformed into a rewriting step. The r/i equation 
was already known to Lafont [Laf97| : the r/o equation was introduced by Fernandez and 
Mackie |FMn3j . 

Definition 1.13 (r/- and /Sry-equivalence) . We define the relations and as the 
reflexive, transitive, and contextual closure of respectively the left and right equation of 
Fig. m which we call rjQ and rn equation, respectively. Then, we define r]- and /Jr^-equivalence 
respectively as (~,,o U and ~/3^= (~/3 U ~^)+. 

The following results are the counterparts of Lemmas 11.91 and 11.101 for ry-equivalence. 
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Figure 4: The equations defining ry-equi valence. In both equations, a, j3 range over ceh 
symbols. In the left equation, a is binary; in the right equation, (5. 

Lemma 1.14. Let t he a tree without e cells. Then, we have 




Proof. By induction on the structure of r. □ 

Lemma 1.15. Let a, (3 range over binary symbols, with a ^ (3. Let A be a tree not 
containing [3 cells, and let B he a tree not containing a cells. Then, we have 




Proof. By double induction on the structure of A and B. □ 

An easy corollary of Lemma 11.141 is that, modulo r/-equivalence, the trees rooted at the 
free ports of a net in the decomposition given by Lemmas 1 1 . 41 and 1 1 . 6 1 can "look like" almost 
anything we want: 

Lemma 1.16. For any net u and for any trees without £ cells ti, . . . ,r„, there exists a net 
v' such that 




Proof. Simply "77-expand" the wires connected to the free ports of v as in Lemma ll.141 □ 
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When oriented from right to left, the 770 equation is formally identical to the standard 
ry-expansion rule in multiplicative proof nets (see for example the work of Pagani |Pag07| ) , 
except that it may be applied to any wire in a net, while ry-expansion in proof nets concerns 
only axioms. Actually, it is possible to show that, when combined with /3-equivalence, the 
TjQ equation still generates /^ry-equivalence even if its application is limited to axioms. 

Lemma 1.17. Let fi v iff n = C[fj,o] and v = C[u:)], where /ig is a net matching the 
left member of the i]o equation of Fig. ^ and u> is an axiom of u. Let he the reflexive- 
transitive closure of the symmetric closure of — and let — ,y= (— U — r?i)^- Then, 

Proof. Let us set — = (— /3 U —^)~^. The inclusion ~^^^C~^^ is obvious, because by 
definition ~~ C For what concerns the reverse inclusion, it is enough to show that if 
ly is obtained from by a single application of the rjQ equation on a wire which is not an 
axiom, then /i i/. We can assume witout loss of generality that such a wire is in z/. 
Then, we must have ^ = C[/io] and = C[t], where r is a tree and 




We need to prove that C[^o] — C[t]. If r = e, we leave it to the reader to check that 
C[iio] — Clfj-'ol C[e]. Otherwise, we can assume r to be "maximal", i.e., its leaves are 
either free or connected to an auxiliary port. In fact, this is not possible only if one of the 
leaves of r is connected to the principal port of the a cell of ^0 shown at the bottom of the 
picture; but in this case the wire in v obtained after applying the r/o equation would be an 
axiom, against our hypothesis. Now, r can always be decomposed as follows: 




where S is a tree not containing a cells (we may have B = •), and r{, . . . , r^, r(', . • • ) '^fc are 
trees {k may be equal to zero). By Lemma |1.10| we have 
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By Lemma ll.lSt we have 




Now, if we apply the r/o equation to the nets on the upper right of the above picture, the 
resulting wires will be axioms, because of the "maximality" of r. Hence, C[^o] —n ^i'^l^ ^ 



As recalled in the introduction, a fundamental result due to Bohm |Boh68j implies that 
no non-trivial congruence on A-terms may equate two distinct /3r/-normal forms. In the 
symmetric combinators there is a similar result |Maz07b] . except that one cannot speak of 
/Jr/-normal forms, because, as discussed above, the symmetric combinators lack a notion of 
ry-reduction. 

There is actually a deeper difference between the symmetric combinators and the 
A-calculus, given by the existence of vicious circles. Observe that such configurations are 
stable under /3-reduction, because cells can interact only through their principal port: they 
are sort of deadlocks. Although diverging computations certainly exist in the A-calculus, 
deadlocks are something completely new. Because of this, the notion of normalizable net 
(which, thanks to strong confluence, is the same as that of strongly normalizable net) does 
not play a central role in the theory of the symmetric combinators. Instead, cut-free nets are 
closer to a concept of "true" normal form: a net having no cut-free form represents either 
a diverging or an error-bound computation, i.e., one that generates deadlocks. Other inter- 
esting notions of convergence will be introduced in Sect. [21 but none of them will coincide 
with simple normalization. 

In the following, we say that a net is total if it /3- reduces to a cut-free net. 

Theorem 1.18 (Separation |Maz07b] ) . Let he two total nets with the same interface, 
such that fi '^i3rj V. Then, there exists a test such that 



desired. 



□ 
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or vice versa. □ 

The net on the right in Theorem II. 181 is the one we denoted by E2; we denote the other, 
i.e., a single wire, by w. The following makes us understand the strength of the Separation 
Theorem: 

Proposition 1.19. Let ^ he a congruence on nets, such that ~/3 C ~. Then, cj ~ E2 
implies that, for all with the same interface, v. 

Proof. Let // be a net with n free ports. By the Decomposition Lemma [1.6| we have // = a[v\ 
for some feedback context a and some cut-free net v. Since ~ is a congruence, we can write 




But by Lemma 11.121 the net on the right /^-reduces to E„, where E„ is a net with n free 
ports containing n e cells. Since ~ contains /3-reduction, we have proved that ^ ~ E„ for 
any /x with n free ports, and we may conclude by symmetry and transitivity of ~. □ 

Therefore, the Separation Theorem implies that any non-trivial congruence containing 
/3-equivalence cannot equate two total /3?7-different nets. In particular, on total nets, such 
a congruence must be contained in —pr}- The Separation Theorem will be fundamental in 
guiding us towards a definition of observational equivalence (Sect. [2]). 



1.3. Expressiveness. In strictly computational terms, the interest of the symmetric com- 
binators is given by the following result: 



Theorem 1.20 (Lafont |Laf97j ). Any interaction net system can he translated in the sym- 
metric comhinators. □ 

The definitions of interaction net system and of the notion of translation are out of the 
scope of this paper. We shall only say that, modulo an encoding, Turing machines, cellular 
automata, and the SK combinators are all examples of interaction net systems |Laf97t 
IMaz07a| . An example of encoding of linear logic and the A-calculus in the symmetric 
combinator^ is given by Mackie and Pinto |MP02j . We refer the reader to Lafont's paper 
|Laf97j for a proper formulation and proof of Theorem 11.201 

However, to give an idea of the expressive power of the symmetric combinators, we 
shall show how general recursion can be implemented in the system, i.e., we shall see how 
all recursive relations of the form 



TEH. 



I ••• I 



Actually these encodings use the interaction combinators, but they can be adapted with very minor 
changes to the symmetric combinators. 
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Figure 5: The Lafont code of a net. 




Figure 6: The universal decoder for the Lafont code. 

may be solved. In the A-calculus, the above relation would correspond to 

M N[M/x\ 

where x appears free in N . It is well known that a general solution can be given by resorting 
to a fixpoint combinator, i.e., a term G such that, for all T, QT — >^ T{QT). Then, a solution 
to the above recursive relation would be M = Q{Xx.N). 

A necessary condition for having a fixpoint combinator is the ability of duplicating 
any term. In the symmetric combinators, we are only able to duplicate cut-free nets as in 
Lemma ll. Ill so we do not have a fixpoint combinator at our disposal. To compensate for 
this, we use a fundamental construction due to Lafont |Laf97| . and a generalization of it, 
first considered by Fernandez and Mackie [FMOlj . 

Given a net /i with one free port and containing n cells of type 5, we build a net Ifj,, 
called the Lafont code of /i, as in Fig. [5j The Z^, are trees of C cells, having k leaves. We 
take Zq to be equal to one e cell; the actual shape of for > is not important, as long 
as one tree is fixed for each k. Observe then that, by construction, a Lafont code never 
contains 6 cells. The net ^ can be recovered from its Lafont code by means of a "universal 
decoder", i.e., independent of /x, as in Fig. [6l 

A similar construction removes active pairs and vicious circles, and is given in Fig. [71 
This construction uses the Decomposition Lemma ll.6| and the trees are defined as the 
trees Z^, but using S cells instead of ( cells. The net §/i is called the cut-free code of //. 
Recovering fi from its cut-free code can be done as in Fig. [8j Rigorously speaking, §/x is not 
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Figure 7: The cut-free code of a net. 




Figure 8: The universal decoder for the cut-free code. 

weh defined because, given a net /x, the cut-free net v is not unique in general. However, 
the recovery process works regardless of the particular v we chose for the cut-free code, so 
the abuse of notation is not problematic. 

We shall take the net !§/x as the code of ^. Decoding is done by composing the nets D 
and R of Fig. [6]and[8l respectively; we denote by U the net resulting from their composition. 
Observe that the code of a net is cut-free and does not contain b cells. Hence, Lemma ll.lll 
applies to it, and it can be freely duplicated by means of trees of b cells. 

We leave it as an instructive exercise for the reader to check that, using Lemmas 11.91 
11.101 ^iid II. m the net [i of Fig. [9] is a solution to the recursive relation introduced above 
(we have supposed that [i has n free ports and that there are k copies of /x on the right 
hand side of the relation). 

2. Observational Equivalence 

2.1. Observable axioms. We already discussed in the introduction that in the A-calculus, 
and in functional programming in general, there is a standard way of defining an observa- 
tional equivalence, which was first proposed by Morris |Mor68j . The key idea is to put a 
term (i.e., a program) in a context (i.e., an environment) and to observe its behavior with 
respect to some interesting property (for example, termination). 

In a more abstract way, once we have a language with an internal notion of context, 
we may take any set S of objects of the language and define S'-equivalence as follows: two 
objects a, h of the language are 5-equivalent iff, for every context C, C[a] G 5" iff C[6] G S. 
In other words, we partition the set of all objects into two classes, and we observe the 
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Figure 9: Solving recursive relations. 

contextual behavior of objects with respect to these two classes. Usually, the property 
defining S (and thus its complementary set) is referred to as an "observable". 

As anticipated above, a typical observable is termination. In fact, Morris himself con- 
sidered what we shall call nf- equivalence, which is obtained by taking S to be the set of 
normalizable A-terms. Another fundamental observable is head-termination, i.e., we may 
define hnf- equivalence by taking S to be the set of head-normalizable A-terms, which is the 
same as the set of solvable A-terms. For other examples of observables and for an account of 
Morris- like observational equivalences in the context of the A-calculus, we refer the reader 
to Dezani-Ciancaglini and Giovannetti's survey [DCGOlj . 

We have shown that in the symmetric combinators, and in interaction nets in general, 
we have an internal notion of context, and we can therefore hope of applying the above ideas 
to generate interesting notions of observational equivalence: all we need is finding the right 
observables. We have already remarked in Sect. [L2] that termination is not an interesting 
observable in interaction nets, because of vicious circles. However, the Separation Theorem 
may give us a hint: in fact, it distinguishes two nets by sending one to a net presenting 
a direct connection between its free ports, and the other to a net in which no such direct 
connection will ever form. This points out that the appropriate notion of "connection" may 
be the right thing to observe. 

Intuitively, an axiom in a net is observable when it can be "extracted" from the net 
through interaction, as in the Separation Theorem 11.181 We formalize this intuition as 
follows. 

Definition 2.1 (Observable axiom). Let /i be a net, and let uj = {p, q} be a proper axiom 
of fj,. We say that uj is observable iff fi contains two trees r,, Tj, of respective roots i,j, such 
that p is a leaf of Tj, g is a leaf of Tj, and i,j are both free ports of fi. We say that such 
observable axiom is based at i,j. 

It is perhaps useful to visualize observable axioms. A net /i contains an observable 
axiom lu iff it is of the shape given in Fig. [TOl If i = j, then Tj = tj, and uj connects two 
leaves of the same tree. Note also that one or both of Tj, Tj may be equal to •; in particular. 
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l-to 




j 



Figure 10: An observable axiom. 

a wire whose both extremities are free (as in the Separation Theorem ll.lSp is an observable 
axiom. 

Observable axioms may be succinctly described by assigning them an address. In the 
following, we let a, b range over the set W = {p, q}* of finite binary words, and we denote 
by 1 the empty word. Pairs of finite words are denoted by a (8) 6, and ranged over by s, t. 
The concatenation of two finite words a,b is denoted by simple juxtaposition, i.e., as ah. 
The concatenation of two pairs of finite words a ® h,a' ® b' is defined as aa' ® bb' , and is 
also denoted by juxtaposition. 

Definition 2.2 (Address). An address is an unordered pair of elements of W x W x N, 
denoted hy a ^b@i ^ d@j, and ranged over by f , t). Let r be a tree, and / a leaf of r. 
We associate with / an element of W x W, denoted by bfr^l), by induction on r: 

• T = •: br^(/) = 1 (g) 1; 

• T = 6{ti,T2): brT-(/) = (p (g) l)br^j (/) if / is a leaf of ri, br^il) = (q (X> l)brT-2(/) if / is a leaf 
of T2; 

• T = C{ti,T2): brr{l) = (1 p)br^j (/) if / is a leaf of n, br^(/) = (1 ® q)brT-2(/) if / is a leaf 

of T2. 

Let now u> = {p, q} be an observable axiom of a net fi; we define its address to be 

addr^(u;) = br^,(p) @« --^ br^^-(g) @ j, 

where the trees among whose leaves there is p, q, respectively, and i,j are the roots 

of Ti,Tj, respectively, which are free ports of // (hence i,j G N by our convention on free 
ports of Definition II. ip . 

In the following, we denote by ax(/u) the set of all addresses of the observable axioms 
of a net fi, and we define 

ax*(^) = IJ ax(^')- 

Proposition 2.3. Let fi fi' . Then, ax(/x) C ax(/x'), and ax*(/u) = ax*(;u'). 

Proof. Simply look at Fig. [TOl which represents the generic form of fi: any active pair must 
be inside fiQ, and, after reducing it, since interaction rules are completely local, the "same" 
axiom as uj is still present in /j,', with the same address. The invariance of ax*(-) is a 
consequence of the confluence of /3-reduction. □ 
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Figure 11: A non-normalizable net producing a finite number of observable axioms. 

Note that a net can only have a finite number of observable axioms; then, by Propo- 
sition 12.31 ax*(/i) is finite whenever fj, is normalizable. However, normalizability is not 
necessary: non-normalizable nets producing a finite number of observable axioms exist, as 
shown by the example in Fig. [TT) the only observable axiom ever to be found is the one 
already present in the net starting the reduction sequence, i.e., 1 (8) pp@ I ^ pq@ 1. 

We now have two interesting notions of observable: the appearance of observable axioms 
during reduction, and the fact that these are only produced in finite number. 

Definition 2.4 (Observability predicates). We say that /x is immediately observable, and 
we write /ij., iff ax(;u) ^ 0. We say that fj, is observable, and we write iff ax*(^) ^ 0, or, 
equivalently, /U — >^ /i'j. We say that fj, is finitarily observable, and we write /i-H^, iff ax*(^) 
is non-empty and finite. We write fifl and /itlT for the negations of fiij- and /iJJ^, respectively. 
In particular, if fj,-\\ we say that fi is blind. 

Definition 2.5 (Observational equivalences). Two nets /i, with the same interface are 
axiom- equivalent (resp. finitarily axiom- equivalent), and we write /i ~ (resp. /i = v), iff 
for all contexts C, C^^ iff C[v]i^ (resp. C^^i iff C^^). 

It helps thinking of an immediately observable net as a head normal form in the 
A-calculus. This analogy can be made more precise: our definition of observable net 
can in fact be extended to any interaction net system |Maz06j . in particular to sharing 
graphs [?, IGAL92j : then, one can see that the head variable of a head normal form T 
corresponds to an observable axiom in the sharing graph of T. 

Observe that, once we think of observable axioms as head variables, we are naturally 
led to see ax*(/i) as nothing but a sort of "Bohm tree" of For instance, ax*(-) is an 
invariant of reduction (Proposition 12. 3( ). just like the Bohm tree of a A-term. In Sect. 13. 1^ 
we shall develop an abstract interpretation of nets starting from this intuition. 

2.2. Observable axioms and the geometry of interaction. The geometry of interac- 
tion (Gol) was introduced by Girard [Gir89j as a mathematical formulation, using functional 
analysis and operator algebras, of the cut-elimination process in linear logic. Later, it was 
reformulated using much less sophisticated tools by Danos and Regnier |DR95] . and it was 
also transported to the interaction combinators (symmetric and not) by Lafont |Laf97j . 
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c*c y 1 
d*d y 1 
f*f y 1 

g*g y 1 



C*f ^ fc* 
c*g >- gc* 
d*f ^ fd* 
d*g ^ gd* 



f*c >- cf* 
f*d df* 
g*cy eg* 
g*d >- gd* 



Figure 12: Word rewriting on monomials. 



As a rough approximation, we can say that the Gol interprets nets as collections of paths 
which are stable under /3-reduction; we shall see that these paths ultimately correspond to 
observable axioms. 

Definition 2.6 (Monomial, rewriting and value of monomials). An atom is an element 
of {c, d, f , g, c* , d*, f*, g*}; and atom is positive if it belongs to {c, d, f, g}, otherwise it is 
negative. A monomial is a finite word on the set of atoms. The set of monomials is denoted 
by Ai, and ranged over by A,B; the empty monomial will be denoted by 1. A monomial is 
positive if it is empty or contains only positive atoms. We define an involution (•)* on A4 
by setting (c)* = c*, (d)* = d*, and similarly for f, g; (c*)* = c, (d*)* = d, and similarly 
for f*,g*; 1* = 1, and (AB)* = B*A*. 

We define a word rewriting relation ^ on as in Fig. [T2j We say that A' ^ A4 is 
clash-free iff A' y* AB*, where A, B are positive monomials. 

Let A G M, and let be an occurrence of negative atom in A, i.e., A = A'AqA" for 
some A', A" € A4. The value of in A, denoted by u^(j4q), is the number of positive 
atoms in A". We define the value of A to be v{A) = X^^*'yA(^o)' where ranges over 
the occurrences of negative atoms in A. 

Lemma 2.7. Let A>~ B. Then, v{A) > v{B). 

Proof. By simple inspection of Fig. [121 D 

Proposition 2.8. Rewriting of monomials is confluent and strongly normalizing. 

Proof. For what concerns confluence, simply observe that there are no critical pairs. Strong 
normalization is a consequence of Lemma 12.71 □ 

Definition 2.9 (Port graph). The port graph of a net /x, denoted by PG(;u), is an undirected 
multigraph whose edges are weighed in the positive monomials, defined as follows: its 
vertices are the elements of Ports(/i), and there is an edge between two ports p, q iff one of 
the following (non mutually exclusive) conditions hold: 

external edge: {p,q} € Wires(^); the weight in this case is 1; 

internal edge: p and q are principal and auxiliary ports of a cell of ji; the weight in this 
case depends on the auxiliary port q: it is c (resp. d) if q is port number 1 (resp. 2) of a 
6 cell, and it is f (resp. g) if q is port number 1 (resp. 2) of a C cell. 

As an example, in Fig. [13] we give the port graph of the net of Fig. [TJ 

Definition 2.10 (Paths, weights |DR95llLaf97] . values). A straight path of a net ^ is a path 
of PG(//) which does not contain two consecutive internal edges. We say that a straight 
path crosses an active pair iff it contains an external edge corresponding to a proper cut. 
A maximal path is a non-empty straight path connecting two free ports of /i. An observable 
path is a maximal path crossing no active pair. We denote by mpj j(^) the set of maximal 
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Figure 13: The port graph of the net of Fig. [TJ Internal edges are dotted, and their weight 
annotated beside them; the other weights are omitted, and are all equal to 1. 



paths of a net n from its free port i to its free port j, and we denote by mp(/x) the set of 
all maximal paths of fj,. 

Let (p S mp(/i), and let e be an internal edge of PG(/i) used by (p. Note that e must 
correspond to a binary cell c of /i; hence, there is no ambiguity in saying that 4> "enters" 
c, uses the internal edge, and then "exits" c. We say that e is crossed downwards (resp. 
upwards) by if </> enters c through an auxiliary port (resp. through its principal port) and 
exists c through its principal port (resp. through one of its auxiliary ports). Let A be the 
weight of e in PG(/i). The weight of e in cj), denoted by w^{e), is j4 if e is crossed downwards; 
otherwise, it is A* . If e is an external edge, we fix W(f){e) = 1. 

Now let (j) = ei, . . . ,en be a maximal path of a net; we define the weight of (j) to be the 
following monomial: 

w{(j)) = w^{en) ■ ■ ■ w^{ei) 
(note the reversal of the order of edges). Moreover, we define the value of (j), abusively 
denoted by v{(j)), as v{w{<p)). 

In the sequel, we shall speak of paths in a net /i without explicitly referring to PG(/i). 
This will not be a source of confusion, because all edges of PG(^) correspond to either wires 
of /_f or "internal connections" represented by the cells of fi; hence, given a straight path of 
fi, we can easily trace it directly on its graphical representation, and vice versa. 

Note that the presence of an observable path in a net fi implies the presence of exactly 
one observable axiom in /i, and vice versa (modulo orientation of paths, i.e., an observable 
axiom actually induces two observable paths, which are the reversal of each other). In 
fact, if we look at Fig. \T0\ we find an observable path by entering the net through its free 
port i, "going up" Tj through the branch leading to lv, following u> itself, and "descending" 
Tj through the only branch leading us to its root, which is the free port j. Conversely, it is 
easy to see that any observable path must be of this form (with Tj, tj which may be equal 
to •), because of the absence of active pairs. 

Definition 2.11 (Residue and lift of a maximal path). Let /i — >^ fi' , and let (j) G mp(^). 
The residue <j)' of (j) in is, if it exists, the maximal path of /u' defined as follows. If (j) does 
not cross the active pair reduced, then by the locality of interaction rules, "the same" path 
as (j) is found in fi', and this is taken to be 4>' . Otherwise, we call 1, 2 and 3, 4 the auxiliary 
ports of the cells (which must be binary, because (j) is maximal) composing the active pair 
reduced, and we distinguish two cases: 
• the two cells have the same symbol: 
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— if connects 1 to 3 or 2 to 4, then this connection becomes a wire in so (j)' is equal 
to what is left of (j) with the active pair replaced by a wire; 

— if (/) connects 1 to 4 or 2 to 3, then (j) has no residue; 

• the two cells have different symbols; then, whatever ports are connected by the con- 
nection is still present in /i', so (j)' is equal to what is left of cf) with the active pair replaced 
by this new connection. 

Of course (j) may cross the active pair more than once, but this is not problematic: its residue 
is still defined as above, replacing every crossing with the appropriate path described above. 
Conversely, if (p' S mp(/x'), then it is the residue of exactly one maximal path of ji, which is 
called the lift of (f)' in /x. 

Remark that the notions of residue and lift can be extended to reductions of arbitrary 
length: if // — >^ and if is a maximal path of we can look for its residue (if it exists) by 
tracing the successive residues of along the reduction; conversely, if 4>' is a maximal path 
of /i', by successively lifting (j)' along the reduction, we obtain the lift of (/>' in fi. Remark 
also that residues connect the same free ports as their lifts: if (/> G mpjj (/i), and if (p' is the 
residue of in a reduct /i' of then cj)' G mpjj (;u'). 

The following shows that monomial rewriting is related to /3-reduction: 

Proposition 2.12. Let fi — >^ /x', let cj)' € mp(/i'), and let (j) he the lift of cj)' in fi. Then, 
w{cj)) w{cj)'). 

Proof. If cj> does not cross the active pair reduced, we have cp' = cj>, and the result trivially 
holds. So suppose that (j) crosses the active pair reduced. We start by observing that, 
since cp is maximal, the active pair reduced must concern two binary cells c, c'. We set 
11,12 to be the auxiliary port number 1 and number 2 of c, respectively, and i'i,i'2 to be 
the auxiliary port number 1 and number 2 of c', respectively. We have two cases: an 
annihilation, or a commutation. Suppose we are in the first case. Since (f> has a reduct in 
fj,', each time (f> crosses the active pair made by c, c', it must do so by using the pairs of 
ports ii,i'i or i2)^2- Hence, if cj> crosses the active pair n times, there exist n occurrences 
of positive atoms Ai, . . . , An such that w((/>) = . . . A^Ai . . . A^An . . ., i.e., the weight of (j> 
contains a word A^A^ for each crossing of the active pair. Now, by Definition 1 2. IH all such 
crossings are replaced by wires in cp', so w{(j)') = . . . 1 . . . 1 . . ., and we thus clearly have 
w{(t)) >-* w{(j>'). Suppose now that we are in the case of a commutation, with cp crossing n 
times the active pair made of c, c'. This time, we must have n negative atoms A^, . . . , A* 
and n positive atoms Bi,...,Bn such that w{(p) = . . . A^Bi . . . A^Bn . . ., and, for each 
1 < A; < n, the atoms satisfy that, if Al G {c*,d*}, then Bk G {f, g}, and if Al G {f*,g*}, 
then Bk G {c, d}. Hence, again by Definition 12.111 we have 'w{cp) = . . . BiAl . . . BnA^ . . ., 
and, by looking at Fig. [121 ^{4') >~* w{cp'). □ 

Proposition 12.121 is the basis of the Gol. In fact, the above result basically transforms 
/3-reduction into a word rewriting system; the idea then is to take a model of this rewriting 
system and build from it a model of /3-reduction. By "model", we mean a function [•]] 
interpreting monomials in some mathematical structure such that, for a!i\.A,B^M,A^B 
implies \A\ = \B\. The following construction, given by Lafont |Laf97j and inspired by 
previous work of Girard |Gir89j . does precisely this. 

In the following, an involutive monoid is a couple (M, (•)*) where M is a multiplicative 
monoid, and (•)* an involutive antiautomorphism of M. A homomorphism / between 
two involutive monoids (M, (•)*), (M', {■)^) is a homomorphism of monoids preserving the 
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involution, i.e., such that, for all a € M, f{a*) = f{a)^. Similarly, an involutive unit 
semiring is a couple {S, (•)*) where S is a unit semiring, whose additive and multiplicative 
units are denoted by and 1, respectively, and (•)* is an involutive antiautomorphism of S. 
Let TZ be the involutive unit semiring generated by the set {p, q} and by the relations 

p*p = 1 p*q = 0, 

q*q = 1 q*p = 0. 

Consider now the semiring 1Z(^TZ] this is still an involutive unit semiring, the multiplicative 
unit being 1 ®1 and the involution being defined by a-i ^ h)* = J27=i K ® Our 

model will interpret monomials in 7^ (8) 7^, as follows. By definition, the set is a free 
involutive monoid, and TZ ®TZ may also be seen as an involutive monoid, by taking its 
multiplicative part; hence, we can define a homomorphism [•] by setting 

|cl = p 1 If] = 1 P, 

Idl=q®l Igl = l®q. 

The fact that M is free ensures that [[•] is defined everywhere once it is defined on its 
generators. 

Proposition 2.13. For all A,B e M, A y B implies {Aj = [Bj. 

Proof. The rules of Fig. [12] of the form A*Ayl are modelled by the annihilation relations 
a*a = 1 defining TZ; the rules of the form A*B >- BA* are modelled by the commutations 
(a ® 1)(1 ® 6) = (a (g) 6) = (1 ® b){a (g) 1) in TZ(^TZ. □ 

Now, given a cut-free net u with n free ports, the Gol assigns to it a formal n x n matrix 
with coefficients belonging toTZ(S)TZ and defined as follows: 

'J^'Gmpi .,.(1/) 

Note that mpjj(/i) coincides with the set of observable paths from i to j, because v is 
cut-free; there are obviously finitely many of these, so the above sum is finite and defines 
an element oiTZ®TZ. 

If /i is a net, we know by the Decomposition Lemma 11.61 that we can always write 
/i = (j[vq\ with vq cut-free and a a feedback context; the key result of the Gol is that, if ^ 
is total of cut-free form we can compute starting from |fo]]. For this, we use a formal 
matrix associated with u, which we denote by |cj]], defined as follows: if vq has n + 2k free 
ports, then \a\ is a (n -|- 2k) x {n + 2k) matrix, such that la}^ j = 1 if it connects the free 
ports i and j of vq, and = otherwise. 

Theorem 2.14. Let fi = ^[z^o] be a net with n free ports, with having n + 2k free ports. 
Then, is total iff \a\ is nilpotent, and in that case, if u is the cut-free form of n, we 
have 

\h=0 I 

where vr is the formal matrix of the inclusion morphism of (TZ ® TZ)"" into (TZ (8) TZ)'"'~^'^^ , and 
TT* its transpose. 
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Proof. This was originally proved by Girard for linear logi(0 |Gir89] . with nilpotency only 
as a necessary condition for strong normalization {i.e., totality); Danos and Regnier later 
proved the converse |DR95j . For the symmetric combinators, the result with nilpotency as 
a necessary condition is due to Lafont |Laf97j : a proof that nilpotency is also sufficient for 
totality can be found in the author's Ph.D. thesis |Maz06j (as the proof of Theorem 3.70). □ 

The formula for computing [z^] from Jz^ol and [a] given in Theorem 12.141 is known as 
the execution formula. For total nets, the execution formula is an invariant of /3-reduction, 
and therefore gives a model of However, this does not work for non-total nets, because 
in that case the sum in the execution formula has an infinite number of terms. To handle 
it, one solution would be to put some topology oxiTZ^lZ (or rather, on its algebra of formal 
matrices), and study the convergence of the execution formula in this topology. Another 
solution, which is the one we chose in this paper, is to deal directly with possibly infinite 
objects, just like one deals with possibly infinite Bohm trees in the A-calculus. 

In fact, even when it "diverges", the execution formula is not completely meaningless: 
it computes the interpretations of the weights of those maximal paths which are never 
"destroyed" by reduction. We shall see that these correspond to the observable axioms 
generated during reduction. This gives a further justification for our definitions of Sect. 12.11 

Definition 2.15 (Execution path |DR95j ). Let /u be a net. An execution path of is a 
maximal path (f) oi ^ such that, whenever — s-^ /i', (j) has a residue in /x'. 

Remark that, as an immediate consequence of the definition, any residue of an execu- 
tion path is itself an execution path. As we said above, execution paths are those which 
are preserved by reduction, and which eventually generate observable paths (and hence 
observable axioms). 

Lemma 2.16. Let fi be a net, and let <j) be an execution path of ^. Then: 

(1) v{(j)) = implies that (j) is observable; 

(2) v{(j)) > implies that (j) crosses an active pair, reducing which we obtain fi and 
the residue (p' of (j) in fi' is such that v{(j)') < v{cj)). 

Proof. For part (1), observe that v{(t)) = implies w{(f)) = AB* for some positive monomials 
A,B, which is clearly the weight of an observable path. For part (2), note that v{(j)) > 
implies w{(j)) = A'AqBqB' for some A',B' G M and some positive atoms ^Oi^o- Then, (j) 
crosses an active pair, so we apply Proposition 12. 12] (or rather its proof) and Lemma [2.71 H 

Lemma 2.17. Let fi be a net, and let (j) € mp(/i). Then, the following are equivalent: 

(1) (j) is an execution path; 

(2) n fx' such that the residue of (f> in fi' is an observable path; 

(3) w{(l)) is clash-free; 

(4) iwm / 0. 

Proof. (1) implies (2) is proved by induction on v{(j)), using Lemma l2.16i 

For (2) implies (3), let (p' be the residue of (p in Since it is an observable path, we 
have w{(j)') = AB* for some positive monomials A, B, and we conclude by Proposition 12. 12] 

^Actually, as formulated here, this resuh holds only for multiplicative linear logic; some technical con- 
straints are needed in full linear logic, because the execution formula does not model cut-elimination in the 
general case. 
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For (3) implies (4), observe that normal form of w{(j)) is by definition of the form AB*, 
so by Proposition 12.131 jwid))} = {AB*} = lAjlBj*, which is never equal to by definition 
of l-l 

For (4) implies (1), we prove the contrapositive. Suppose (/> is a maximal path of /U 
which is not an execution path. This means that fi fJ-' and the residue (j)' of 

(j) in fi' has no residue in By Definition 12.111 the only possibility is that (j)' crosses an 
active pair made of two binary cells c, c' of the same kind, using auxiliary port 1 of c and 
auxiliary port 2 of c'. Hence, we have, for some A',B' € A4, w{(f)') = A' A^BqB' , and either 
Aq,Bq € {c, d}, or Aq,Bq G {f, g}, but in both cases 7^ Bq. Hence, by Proposition 12.131 
and by definition of 7^, we have lw{(l))j = M^')} = [^'H^oF I-BoM^'l = I^'lO[S'] =0.0 

Now, we invite the reader to check that, if a net ly has an observable axiom uj whose 
address is s@i ^ t@j, and if (j) is the observable path from i to j induced by to, we 
have = ts*. Vice versa, if v has an observable path (p from free port i to free 

port j such that w{(f)) = BA*, then the corresponding observable axiom will have address 
lA} @i ^ IB} @j. This is the reason behind our choice of notations for the addresses of 
observable axioms; moreover, it allows us to state the following: 

Proposition 2.18. For every net /i, we have 

ax*(/x) = {s@i ^t@j I (f) e mpjj(/x), lw{(/))} = ts*] . 

Proof. For what concerns the inclusion from left to right, we have /i ^' such that /i' 
contains an observable axiom of address s@i ^ t@j. By the remark made above, we know 
that this observable axiom induces an observable path (p' of fj,' from free port i to free port 
j such that = ts*; then, we take its lift (p in fi, and conclude by Propositions 12.12] 

andEISl 

For the other inclusion, by hypothesis [«;((/))| ^ 0, so by Lemma 12.171 we have /x fi' 
such that the residue (p' of <p in /i is observable. By Propositions 12.12] and ETTBl = 
[[?i;((/>)]], and, as remarked above, we know that (p' induces an observable axiom of address 
s @i t @ j , which is in ax*(^) by definition. □ 

We encourage the reader to compare Proposition 12.181 with the definition of li^J given 
above: basically, we can see ax*(-) as the extension of [[•] to arbitrary nets. In fact, if we 
tried to define [//] in the general case, the sum ranging over mpj might be infinite; as 
mentioned above, instead of introducing a topology to handle series, we opted for a "Bohm- 
tree" approach: we reduce /x, and collect the observable axioms showing up along the way, 
accepting that there may be an infinity of them. Using formal matrices does not make much 
sense at this point, but we still need to retain the information concerning the free ports 
connected by the observable paths: this is the reason behind the presence of integers in 
addresses. The fact that addresses are unordered pairs reflects the fact that an observable 
path carries the same information as its reversal; indeed, in the Gol interpretation of a 
cut-free net u one can show that li^Jij = [i^l^ j (all operators are "Hermitian" |Gir89j ). 

The question of what can be done by taking the topological approach instead of the 
"Bohm tree" approach is left open, and is out of the scope of this work. We shall see that 
topology will eventually play a fundamental role in our approach too, but for quite different 
purposes. 
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Figure 14: A quasi-wire; /z is an arbitrary net with an empty interface. 

2.3. Solvability and e-reduction. The analogy "an immediately observable net is like a 
A-term in head normal form" can be given a justification within the theory of the symmetric 
combinators. In the following, we call a net of the form given in Fig. [T3]a quasi-wire. 

Definition 2.19 (Solvable net). A net fi is solvable iff there exist a test 6 such that 
9[fj] W, where W is a quasi-wire. 

We shall see that, just as A-terms having a head normal form coincide with solvable 
A-terms, so in the symmetric combinators observable nets and solvable nets coincide. Fur- 
thermore, in Sect. 15.21 we shall give evidence supporting the fact that the above notion of 
solvable net is indeed analogous to that of a solvable A-term. 

Let C be a net, and let / be a subset of its interface. We say that C is relatively blind on 
/ iff, whenever s@i ^ t@j G ax*(C), i G / implies j /, i.e., C generates no observable 
axiom all based within /. A context C for nets with n free ports will be said to be relatively 
blind if its interface is {1, . . . , n} tt) / and C is relatively blind on /. 

Lemma 2.20. For every net fj, and relatively blind context C, ^f|~ implies C[/i]ff. 

Proof. Let fj,-f[, and suppose for the sake of absurdity that C[fj,] — >^ ^'J,. The observable 
axiom in fi' induces an observable path <j)' in /x', which has a lift (p in C[fj], connecting two 
free ports of the relatively blind interface of C. Suppose that (/) S mp(C). By looking at 
the proof of Proposition 12.121 we see that (p can be transformed into an observable path 
by reducing only the active pairs it crosses; hence, we would have C — >^ C, with cp' an 
observable path of C , which would contradict the fact that C is relatively blind. Then, we 
must have the following situation 



C[^^] 
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where we drew <j) as a dashed line. As a consequence, we can write (j) = 4''4'o4''\ where 
00 € mp(^). We thus have w{(l)) = w{(f)")w{(f)Q)w{(f)') , which means that w{(j)o) is a subword 
of w(</>). But, by Lemma [2.171 w^cp) is clash-free, so w{(po) is clash-free too; if we apply 
Lemma 12.171 again, we obtain that <po has an observable residue, which, by the above 
remark, can be obtained by reducing only the active pairs it crosses, which are all within 
/i. Therefore, we obtain fiij., a contradiction. □ 

Lemma 2.21. Let fi be a net. Then, /if|~ implies 9[fj]i[ for any test 9. 

Proof. Simply observe that a test is a relatively blind context. □ 

Now, the forward implication of the equivalence "observable iff solvable" holds because 
observable axioms are defined precisely with the intuition that we can "extract" a wire from 
/X by means of a test; the converse is a consequence of Lemma l2.21t 

Proposition 2.22. A net n is observable iff it is solvable. 
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Proof. Let fii}.; by Definition 12.41 we know that ii reduces to a net of tlie sliape given in 
Fig. [lOl Tlien, consider tlie test 




wliere we leave free exactly the two leaves of Ti,Tj corresponding to those connected by the 
observable axiom tu of Fig. [TOl By Lemma 11.91 we have that 9[fj] /3-reduces to a quasi-wire, 
as desired. Suppose now /iff. Remark that quasi-wires are immediately observable, so if 
were solvable, we would have a test 6 such that 0[/i]JJ-, contradicting Lemma l2.21i □ 

Another interesting consequence of Lemma 12.211 is that finitary axiom-equivalence is 
stronger than axiom-equivalence: 

Proposition 2.23. For all fi = u implies /i ~ z/. 

Proof. Assume fi = i^, and let C be a context such that C[/x]JJ-. We need to show that C[i^]~IJ-; 
by symmetry of =, this will be enough to prove the result. By Proposition 12.221 C[ij] is 
solvable, so we have a test 6 such that ^[C[//]] /3-reduces to a quasi-wire. But quasi-wires 
generate exactly one observable axiom, so 0[C[/i]]4^, which hj ^ = v implies 6'[C[z^]]4^, which 
by Definition 12.41 implies 0[C[z^]]JJ-, which implies C[z^]J| thanks to Lemma l2.21[ □ 

The A-calculus has an interesting notion of Q-reduction, which is defined by the re- 
duction rule M — il. iff M is unsolvable and different from $7, where is itself some 
fixed unsolvable term (usually one takes O = {Xx.xx){Xx.xx)). Added to other reduc- 
tions, Jl-reduction has interesting properties: /Jfi-reduction and /Jy^fi-reduction characterize 
provability in the theory H (the smallest sensible theory, cf. Sect. 15. 3p and Hi], respec- 
tively |Bar84j . This latter coincides with nf-equivalence, defined in Sect. [2TT1 

Since we have our own notion of unsolvable net, it may be interesting to study the 
behavior of the following rewriting rule, directly inspired by O-reduction: 

where has n free ports and fi ^ E„. 

Definition 2.24 (e- and /3e-reduction). We write for the contextual closure of the 
above rule, and we define -^f3e= {—^p U — >£). 

Of course the rewriting rule defining e-reduction is not recursive, because it is unde- 
cidable whether a net is blind (intuitively, this is a consequence of the Turing-completeness 
of the symmetric combinators, and of Rice's theorem — any non-trivial class of recursive 
functions, hence of nets, is undecidable). This is exactly the same situation as ri-reduction, 
where it is undecidable whether a A-term is unsolvable. We shall see that the interest of 
/3e-reduction is in its relationship with finitary axiom-equivalence (Corollarv l2.3ip . 

We say that a binary relation on nets has the quasi- diamond property iff /i ^ /ii 
and fi fi2 implies that there exists z/ such that /ii or /ii = and /.i2 ^ v oi ^2 = i^- 

Lemma 2.25. Let he a binary relation on nets satisfying the quasi-diamond property. 
Then, its reflexive transitive closure satisfies the diamond property, i.e., it is confluent. 

Proof. A standard diagram-chasing argument. □ 
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Lemma 2.26. The relation -^pe satisfies the quasi-diamond property. 

Proof. Let ^ ni and /x — fi2. We may suppose /ii / /X2, otherwise there is nothing 
to prove. If the two reductions come from two active pairs, we conclude by applying 
Proposition II. 8i Otherwise, suppose without loss of generality that -^p fii and /i —>e /U2, 
i.e., we have fj, = C[z^] and fj,2 = C[E„], where i/ is a blind net with n free ports. We have 
three cases: 

• 1^ I'' and fii = C[z>'], i.e., the active pair reduced to obtain fii is contained in i^. In 
that case, we still have u'if, so fj-i — ^2- 

• The active pair reduced to obtain fii is "between" and C, i.e., one of its cells is in v 
and the other, call it c, is in C. We suppose c to be binary; the nullary case is easier, 
and left to the reader. Then, the cell c together with a suitable identity wiring (which 
may be empty in case n = 1) forms a test 6, and we can write fi = C'[9[i/]] for a suitable 
context C. Now e[i^] -^p v' and /ii = C'[v'], while ^2 = C"[6'[E„]]. By Lemma [1211 we 
have both 0[iy\\\ and 0[E„]ff, so both and ^2 e-reduce in one step to C"[E„_|_i]. 

• The active pair reduced is completely disjoint from u. This case is trivial. 

We are left with the situation in which both and 112 are obtained by means of e-steps. 
Let z^i,z^2 be the blind subnets of reduced to obtain and ^2, respectively. If vi and 
V2 are disjoint, then the diamond property holds trivially. Otherwise, we have ^ = C[v], 
where v is the net 



and vi is equal to v'^ plus uq, while 1^2 is equal to V2 plus vq. Now, if we put 



Q 



Q 



we have /ii = C[oi] and H2 = C[o2]. But v'l and i>2 must be relatively blind on Ii and I2, 
respectively, because vi and 1^2 are blind. Hence, by Lemma 12.201 the subnets marked by 
the dashed rectangles in the above picture are both blind, so /^i and ^2 both reduce in at 
most one e-step to C[E„], where n is the number of free ports of u. □ 



Proposition 2.27 (Confluence of /3e-reduction) . The relation -^*^^ is confluent. 

Proo/. Apply Lemmas [125] and E^Sl □ 

The confluence of /3e-reduction allows us to introduce the following congruences: 

Definition 2.28 {(3e- and /3?7e-equivalence) . fie -equivalence is defined by /x u iff there 
exists such that — o and u —f*^^ o; (3 erf -equivalence is defined by — /jr^e = {—pe U — r?)^- 

Note that /3e-normal forms are always cut-free. In particular, we have the following 
characterization, whose proof is left to the reader. In the following, an e-tree is a tree with 
no leaves; the e-tree e is called trivial. 

Proposition 2.29 (/3e-normal forms). A net /i is f3e-normal iff it is cut-free, and each 
e-tree contained in /x is trivial. □ 
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The following result shows that /3e-reduction is related to finitary axiom-equivalence. 
We first need to extend Proposition 12.31 to /3e-reduction, which is unproblematic: 

Proposition 2.30. fi ~^*i3e ^ iinplies ax(/i) C ax(i/) and ax*(/i) = ax*(z^). □ 

Proof. It is enough to check one-step reductions. If /U — >/3 v, we conclude by Proposition l2.31 
If /i -^e we have that ^ = C[/io] and v = C[E„] for some context C and blind net 
with n free ports; precisely because is blind, the axioms disappearing from ^ are not 
observable; moreover, v does not contain new observable axioms, so ax(fi) = ax(z/), and we 
conclude ax*(^) = ax*(;/) by confluence of /3e-reduction (Proposition 12. 27| . □ 

Corollary 2.31. is fie-normalizahle ijfax*{fi) is finite. 

Proof. The forward implication is an immediate consequence of Proposition 12.301 For the 
converse, ax*(/x) finite and Proposition 12.30] implv that any reduction starting from /x stum- 
bles upon a net /i' such that ax(/x') = ax*(/i). This means that all subnets of //' containing 
active pairs are blind, i.e., they do not produce further observable axioms. There is of 
course at most a finite number of such subnets, so fi' reduces in finitely many e-steps to a 
/3e-normal net. □ 

Up to now we have five congruences strictly extending /3-equivalence: —/3rj, —pe, —fSrje^ 
=, and ~ (the fact that these last two strictly extend ~^ is an immediate consequence 
of Definition 12. 5p . We shall see that the last four congruences form a sequence of strictly 
stronger equivalences: 

£ -f3e £ ^dvs £ = £ =^ • 

The first two strict inclusions are obvious. We shall give a semantic proof of the third 
inclusion (Corollary 14.201 of the full abstraction Theorem I4.14p : Fig. [19] shows that it is 
strict. We already established the fourth inclusion in Proposition 12.231 Fig. 1151 shows that 
the inclusion is strict, as an application of the full abstraction Theorem 14.181 

3. Denotational Semantics 

3.1. Edifices. In what follows, C = {p,q}^ is the set of infinite binary words, ranged over 
hy x,y. As in the case of finite words, the elements of C x C will be denoted hy x ^ y, and 
ranged over by u, v, w. Given two words or pairs of words s, u, where s is finite and u may 
be infinite, we say that s is prefix of u iff there exists u' such that u = su'. 

Definition 3.1 (Pillar, arch, edifice, vault). Let / C N, and set Vi = C x C x I . A pillar is 
an element of = Vfq. Pillars are denoted by u@i, and are ranged over by ^, The pillar 
It @ i is said to be based at i. 

Set Ai = Vi X Vj, and, given {^,v), {C,v') G Ai, define (^,i;) ^ iCv') iff f = and 
v' = or ^' = ^ and v' = v. We then set Ai = Ai / An arch is an element of ^ = ^n- 
Arches are denoted by ^ f (which is the same as v ^ and ranged over by a, b. An 
arch is said to be based at the unordered pair where its two pillars are based. 

An edifice is a set of arches; edifices are ranged over by ^,5^. A vault is an edifice 21 
such that there exists an address i = s@i t@j such that 

21 = {sw @i ^ tw @ j \ w e C X C} . 

The address p is said to generate 21. We denoted by 21(f) the vault generated by p. 
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We now introduce two special kinds of edifices, which will be useful in the sequel. 

Definition 3.2 (Uniform edifice). If <B is an edifice and a G C;, a is said to be uniform in (E 
iff there exists a vault 21 C ^ such that a € 2t. An edifice is uniform if all of its arches are 
uniform. 

Proposition 3.3. An edifice is uniform iff it is a union of vaults. 

Proof. That a union of vaults is uniform is obvious. For the converse, take a uniform edifice 
(B, and let a € S;. By definition, there exists a vault contained in <B which contains o; we 
call such vault Then, it is easy to check that ^ = Uaee^"' I— ' 

Definition 3.4 (Coherence, simple edifice). If a = ^ ^ f is an arch, we define its support 
to be |o| = {(,,v}. Then, given a, o' S A, we say that a and a' are coherent, and we write 
H a', iff |o| n |a'| is either empty or of cardinality 2. An edifice (B is simple iff it is a clique 
with respect to coherence, i.e., for all o, o' G (2;, o H a'. 

Note that, although obviously symmetric, coherence is not reflexive: all arches of the 
form ^ ^ ^, which we may refer to as degenerated, are not coherent with themselves. 

Edifices are naturally endowed with a trace operation. We shall see that this operation 
closely corresponds to the execution formula of the Gol (c/. Sect. 12.2]) : it is also reminiscent 
of the notion of composition of strategies in games semantics. 

Definition 3.5 (Feedback function, trace sequence). A feedback function o" is a fixpoint-free 
partial involution on N of finite domain. In other words, a{i) is defined for finitely many 
z G N, and in that case a{i) / i, and o"^(i) = i. We denote by domo" the domain of a. 

Let o" be a feedback function, let <B be an edifice, and let 5 = 5i, . . . ,5^ be a non-empty 
finite sequence of arches of (E, for which we set, for 1 < k < n, Sk = Uk @ik ^ Vk @jk- We 
say that s is a trace sequence of (B along a iff: 

chain: for all 2 < A; < n, jk-i G domo" and ik = o"(jfc_i); 
match: for all 2 < A; < n, li^ = Vk-i- 
A trace sequence is visible if it further satisfies ii,jn ^ domo". 

The length of a trace sequence 5 is denoted by |5|. We denote by 5zc\^{(B) the set of 
trace sequences of <B along a. If 5 G seq^(£) such that |s| = n, we define the arch generated 
by 5 as a(s) =ui@ii ^ Vn@jn- 

Observe that, if <B is an edifice and a a feedback function, then s = 5i, . . . ,s„ G 5eq^{<B) 
implies s' = Sn,...,Si G 5tq^{<B), a(s') = a(s), and s' is visible iff s is. Intuitively, this 
reflects the fact that a maximal path in a net can always be "reversed". In Sect. 13.21 we 
shall formalize the relation between visible trace sequences and maximal paths. We also 
remark that the role of non-visible trace sequences will be purely technical: their purpose is 
to allow proofs by induction on the length of sequences. In fact, visible trace sequences are 
not suitable for such proof technique, because an initial or final segment of a visible trace 
sequence is never visible. 

Definition 3.6 (Trace). Let C: be a set of arches, and a a feedback function. We define 
the trace of <E along a as 

Tr^((£) = {0(5) I s G seq^((£), s visible}. 
The trace is obviously monotonic: 
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Lemma 3.7 (Monotonicity of the trace). Let ^,5^ be edifices, and let a be a feedback 
function. Then, <E Q ^ implies Tro-(C;) ^ Tro-(5^). 

Proof. Obvious. □ 

In the following, if a, a' are feedback functions of disjoint domain, we denote by a ttl cr' 
the function defined by 

a{i) if i G domo" 
(cr 1+) (t')(^) = < ct'(z) if i G dom a' , 
undefined otherwise 

v 

which is obviously a feedback function. 

Lemma 3.8 (Associativity of the trace). Let be an edifice, and let a, a' be feedback 
functions of disjoint domain. Then, 

Tr,(T¥,.(e:)) =Tr,aa'(e:). 

Proof. We start by establishing the inclusion from left to right. Let a G Tro-(Tro-'(^)), and 
let s G seq^(TrCT'(£)) be the trace sequence generating a, with |s| = m. By definition, if 
we let 1 < < m, each 5^ is generated by a trace sequence s'^ G sec\^i{<B), with |s'^| = n^. 
Then, it is not hard to see that s' = sj, . . . ,5^^,sf . . .s^~}_^,sf', . . . ,s^^ is a visible trace 
sequence of C; along a l±l a', such that a(s') = a(s). 

For the reverse inclusion, let a G Tic^\±ja-'{^) and let s G 5ec\^i^^> {<£) be the trace sequence 
generating o, with |5| = n, and Sk = Uk@ik ^ Vk @jk for 1 < /c < n. We say that A; is a 
breaking point oi 5 if jk ^domo"'. Let now i? = {ki <■■■ < be the set of breaking points 
of s, ordered from the smallest to the greatest. We partition s into m sequences, as follows: 
= Si, . . .Sfc^, and, for 2 < /i < in, = Sfc^_^, . . . ,5^^. Once again, it is not hard to check 
that, for all 1 < /i < m, s'' G seq^,((£), and that s' = a(s^), . . . , a(s'") G seq^(Tr<^/(£)), with 
a(s') = a(5). □ 

The trace of a simple edifice has a very nice property, namely that each arch in it is 
generated by a unique trace sequence: 

Lemma 3.9. Let ^ be a simple edifice, let a be a feedback function, and let 5,5' G seq^(C;), 
such that 0(5) = Ci ^ C2 o-nd a(s') = Ci ^ (2- Then, (1 = ([ implies 5 = s' ; in particular, 
0(5) = 0(5') implies s = s' . 

Proof. Let k be the smallest integer such that Sfc / 5'^,, and let Sk = ^ v, s'^ = ^' ^ v'. If 
k = 0, ^ = (i and C = Ci) so C = C by hypothesis; if A; > 0, the chain and match conditions 
also imply = because we supposed Sfc_i = s'^„^. But is simple, so H 5'^, which 
further implies v = v' . Then, 5^ =5^, a contradiction. □ 

On the other hand, uniform edifices are preserved by the trace: 



Proposition 3.10. Let <t be a uniform edifice, and let a be a feedback function. Then, 
TrCT(C;) is uniform. 

Proof. Let ^ = {a(s) | 5 G 5zc\^{(B)}. Let s be a trace sequence; we shall prove, by induction 
on |s|, that a(s) is uniform in 5", i.e., that there exists ^ = s@i ^ t@j such that G 2l(j:) C 
^. This will be enough to prove the result; in fact, the trace sequences generating the arches 
of 2l(j:) are all visible if 5 is visible, i.e., 2l(j:) C Trcr(^), because this depends only on i and 
j, which are the same in all such sequences. 
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For the base case, |s| = 1, so s consists of a single arch, and the result is a trivial 
consequence of the uniformity of <E. The inductive case is |s| = n > 1. Let s' = Si, . . . ,s.„_i. 
By induction hypothesis, a(s') is uniform in we have an address y' such that a(s') € 
2t(j') ^ ^. In particular, there exist s,ro £ W x W and wq G C x C such that the first and 
last arches of s' are respectively of the form 

swo @i ^ V, 

C ^ rouiQ @ h, 

and, for all € C x C, there exists a trace sequence s"' whose first and last arches are 
respectively of the form 

sw @i ^ V, 
^ ^ rQW @ h. 

Similarly, C: is uniform, so there exist ri,t G W x W and wi G C x C such that 

Sn = riwi@l ^ twi @ j, 
with = and, for all t(J € C x C, the arch 

a"' = riw @l ^ tw @j 

is also in <E. Now, by the match condition, we have vqWo = riwi, which means that ro,ri 
are one prefix of the other. Suppose ro = rir', and consider the trace sequences obtained by 
appending a'' to s"'; these generate all the arches of the form row@i ^ tr'w@j, among 
which there is a(s), which is therefore uniform in ^. The other case is ri = ror'; then, 
consider the sequences obtained by appending a"' to s^'". As above, these prove that a(s) 
is unifrom in ^. □ 

3.2. Nets as edifices. The basic idea to assign an edifice to a net is that arches model 
observable axioms/pathsU In fact, we have already seen that an observable axiom may be 
conveniently represented by an unordered pair of couples of the form s@i, where s is the 
address of a leaf and i a free port. A pillar contains the same information; the need for 
infinite words arises from //-expansion (the r/o equation of Fig. |4|), which can be applied 
indefinitely, as in the pure A-calculus. 

Definition 3.11 (Edifice of a net). Let be a net. We associate an edifice with fj,, denoted 
by G;(/u), as follows: 

<Eip)= U 2l(y). 

yGax* (^t) 

The union of Definition 13.111 is actually disjoint, and the resulting edifice is simple: 

Lemma 3.12. Let n be a net, and let G ax*(/i). Then 

(1) 2t(j:) U 2t(p') is simple, and hence (S(/i) is simple; 

(2) p ^ y' implies 2l(p) n 2l(p') = 0. 



'Graphically (Fig. llOfl . observable axioms/paths look like arches, hence the terminology. 
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Proof. We start by observing that two arches in the same vault are coherent, because in 
an address s@i t@j we always have s ^ t. This proves point (1) in case j: = j:', so we 
may suppose j: 7^ y'. By confluence of /3-reduction and by Proposition 12.31 € ax*(^) 
implies that there exists a net fi' such that n — >^ /i' and fi' contains two observable axioms 
of address respectively, which are distinct because j: 7^ j'. Now, put ^ = s @i ^ t@j 
and j' = s'@i' ^ t'@j', and take a G a' G 2l(j:'). By definition of vault, we 

have a = sw@i^tw@j, a' = s''w'@i' ^ t'w' for some Wjw' G C x C. Suppose 
sw@i = s'w' we would obtain that s is a prefix of s' , or vice versa. But this is absurd, 
because s,s' are addresses of distinct leaves of fi'. This proves point (2); for point (1), 
simply note that the same holds for t,t'. To see that is itself is simple, note that a 
union of pairwise coherent simple edifices is obviously simple. □ 

Note that if fj, has n free ports and a is a feedback function whose domain is included in 
{1, . . . , n}, then a defines a feedback context for n: it is the one connecting the free port i to 
the free port cr(z), or leaving it free if a{i) is undefined. Conversely, each feedback context 
for a net with n free ports defines a feedback function of domain included in {1, . . . ,n}. 
Hence, we shall use a to range over both feedback functions and feedback contexts, and 
make no distinction between the two, speaking more generally of a "feedback" a for a net /x. 

The next result shows how the trace construction is related to the execution formula of 
the Gol. In fact, in Sect. 12.21 we mentioned that this latter is invariant under reduction: if 
fj, = alv] -^i3 (y'\y'\ = ^' with z/, u' cut-free and /z, /x' total, then the formula of Theorem 12. 141 
applied to \a\^ [z/| or [o"']], \v'\ yields the same result. Once again, our work generalizes this 
to non-total nets. 

Proposition 3.13 (Invariance of the trace). Let (i — i-^ ji' , and let fj, = <t[z^] and fi' = cr'[i''] 
according to the Decomposition Lemma \1.6l Then, Tr„{<B{i')) = Ti(^i{(B{i'')). 

Proof. The proof is a bit too long and not interesting enough to be included here. We prefer 
to give it in Appendix El □ 

Let 1/ be a cut-free net, let o" be a feedback for u, and let a G Tro-(£(i^)). Part (1) of 
Lemma l3. 121 and Lemma [3.91 guarantee us that a induces a unique 5 G seqo-(^(i^)) such that 
o(s) = a. If we let 5 = 5i, . . . ,Sn, we see that each Sfc determines an axiom of 1^, which is 
unique by part (2) of Lemma [3.12[ Hence, s induces a sequence of observable paths; thanks 
to the chain condition, these are all composable through a, and, by the visibility condition, 
the first and last paths start and end at a free port of cr[z^]. Therefore, their composition 
forms a maximal path of cr[i^]. 

To sum up, we found out that each arch a of the trace of ^(z^) along a determines a 
unique maximal path of o"[z^]; in what follows, we shall denote this path by <j){a). 

Lemma 3.14. Let v he a cut-free net, let a he a feedhack for v, let p he an address, and let 
a, 0' G 2t(p) C Tr^(£(i/)). Then, 4){a) = <^(o'). 

Proof. Let Si, . . . ,s„ and s'^, . . . ,s^, be the trace sequences generating a and a', respectively. 
We decompose (j){a) and 4>{a!) into observable paths of v, following the 5fc,s'^, as described 
in the remarks above, and we obtain (pi, ... ^ (f>n, (p'l, . . . , (p'^,. Let k be the smallest integer 
such that (pk 7^ and let Sk = u@i ^ v@j, s'^ = u'@i' ^ v'@j'. Suppose A: = 0; if 
we put ^ = s@i^t@j,we have, for some w,w'£CxC,u = sw, u' = sw' , i = i' , and 
moreover for all G C x C we have an arch of the form swQ@i ^ two@j in Ti„{(E{l')). 
By Definition 13.51 this latter implies that, for all tf;o G C x C, there is some arch of the 
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form swq @i ^ V in ^(z^). But, by looking at Definition 13.111 we see that this is possible 
only if there is an axiom of z/ of address so@i t' @j', with sq a prefix of s. Then, the 
arches Sq and Sq correspond to the same observable axiom, and (po = (pQ. Therefore, we 
must have k > 0. In this case, since (pk-i = '^fc-ii we have Sk~i = C Vk-i@p and 
5'f^_i = @Pi aiid the chain condition implies i = i' = cr{p). But Vk-i,v'i^_^ come 

from the same observable axiom, so they have a common prefix. By the match condition, 
u,u' have a common prefix too; but this would be impossible if (j)k 7^ (p'k^ because two 
distinct observable path generate pillars which have no common prefix (c/. the proof of 
Lemma [3TT2|) . So we must conclude (pk = (j)'/^, a contradiction. □ 

Lemma 3.15. Let u be a cut-free net, let a be a feedback for v, and let i,j be free ports of 
cr[u]. Then, the following are equivalent: 

(1) 4) E mp,_^.(aM), lw{^)\ = ts*; 

(2) ^{s@i^t@j) C Tt^{(B{u)). 

Proof. We start with (1) implies (2), noting first that = ts* implies, by Lemma [2. 171 

that (p is an execution path; therefore, we reason by induction on v{(j)) (the value of (p, 
Definition I2.10p . using Lemma 12.161 

• v{(p) = 0. We know that <p is an observable path. The situation can be schematically 
depicted as follows: 



In the above picture, 4> goes "from left to right", and wi, . . . are n proper axioms of 
v. If, for 1 < A: < n, we put addr,^(LL'fc) = = Sk@ik tk @jki from the above picture 
we deduce that ii = i, jn = j, i,j dome, ik+i = cr{jk) for all 1 < /c < n, = 1 (g) 1 for 
all 2 < /c < n, si = s, and tn - ■ -ti = t. Now, given any w £ C x C and 1 < k < n, define 
Wk = tk-i ■ ■ ■ tiw, and put 



It is easy to check that s = Si,...,5n is a trace sequence of ^(z^) along a such that 
a(s) = sw @i tw @ j , as desired. 

• v{(p) > 0. We /3-reduce alv] along (p and obtain cr'[iy'] in which the residue (p' of (p is such 
that v{<p') < v{(p), so that the induction hypothesis applies to (p' . By Propositions 12.12] 
and 12.13] we have = ts*, so the induction hypothesis and Proposition 13.131 give 
us 2t(s(ai ^t@j) C Tr^/(i/') = Ti^{u). 

We now consider (2) implies (1). By Lemma |3.14| any arch of 2l(s@i ^ t@j) yields 
the same (p G mp^ j{a[i']). Hence, we need only check that [^(f^)]] = ts*; we do this again 
by induction on v{(p). 

• v{(p) = 0. We know that (p is an observable path of o'[iy], which we may decompose in 
several observable paths (pi,...,(pn of u, as above. Now, as we remarked in the proof 
of Lemma 13.141 2l(,s@i ^ t@j) C Tr^j^v) is only possible ii s@i and t@j are the 
addresses of the leaves of the trees resulting in the composition oi (pi, . . . ,(pn, similarly to 
the drawing above used in the previous part of the proof. So [[?«((/>)]] = ts*, as desired. 




Si = sw@i^tiw@ji, 

Sk = Wk@ik ^ tkWk @jk, for 2 < A; < n. 
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• v{(/)) > 0. We know that (/) crosses an active pair; however, this time we must prove that, 
by reducing it, we obtain a net in which (p has a residue. If this were not the case, by 
Lemma 12.171 and Proposition 12.121 the only possibility is that the active pair corresponds 
to a clash in w{4>), i.e., we have w{(f)) = A'AqBqB' for some monomials A',B' and some 
positive atoms Aq,Bq, such that, for example, Aq = c and Bq = d. This would yield 
the presence of two observable axioms of u of addresses j: = s@p ^ qb ^ b' @q and 
= pa (g) a' @ ^ t@p', such that a{q) = q', i.e., the free ports q, q' of v are connected 
by cr in o"[z^]. Then, it is easy to see that no arch of ^{i') generated by j: and y' could 
match: indeed, there are no x,y,x',y' G C such that q6x (g) b'y = pax' (g a'y'. But this 
is absurd, because by hypothesis (p comes from an arch of Tro-(z^), which in turn comes 
from a unique trace sequence, and trace sequences satisfy the match condition. 

Therefore, we now know that we may reduce the active pair crossed by (p, obtaining 
o"[i^] — >^ f^'W] such that </> has a residue (p' in cr'[z/']. Now, by Proposition 13.131 we have 
Tr^/((J(i/')) = Tr^(<£('^)), so 2l(s @ z --^ t ©j) C Tr^/((E(i/'))- Thanks to Proposition [232] 
and Lemma 12.71 we can apply the induction hypothesis to (p', and obtain [[tt;((/>')I| = ts*. 
But, by Proposition 12. 13t = [[i/; (</>')]], and we are done. 

□ 

Proposition 3.16. Let v be a cut-free net, and a a feedback for v. Then 

^{a[u]) = Tr,((J;(i/)). 

Proof. We start with the inclusion from left to right. Let a € ^((t[z^]). By Definition 13.111 
there is an address p = s(9)i'-^t@j€ ax*((T[z^]) (which is also unique by Lemma [3.12p such 
that € by Proposition 12. 181 there exists (p E mpjj((T[z/]) such that = ts* , and 

by Lemma EH] 2l(y) C Tr<^((£(z^)). 

For the inclusion from right to left, let a G Tro-(G;(z^)). By Lemma [3.31 ^{v) is uniform, so 
by Proposition 13.10] Tr^((3:(z/)) is also uniform. Then, there must be an address y = s@i - 
t@j such that a G 2l(j:) C Tro-(£(z^)). We can thus apply Lemma [3. 151 and Proposition [2]T8l 
which, by Definition 13.111 give us 2l(j:) C G;(cj[z^]). □ 

Compare Proposition 13.161 with Theorem 12.141 basically, the trace construction can be 
seen as an extension of the execution formula, which works in all cases, even when cj[i/] is not 
total. Something similar happens when one formulates the Gol in categorical terms, using 
certain traced monoidal categories, as shown by Haghverdi and Scott |HS04| . Thanks to 
the associativity of the trace, we can straightforwardly extend Proposition 13.16] to arbitrary 
nets: 

Corollary 3.17. For any net fi and feedback a for [i, <t{a\[j}\) = Tro-(2(^)). 

Proof. By the Decomposition Lemma 11.61 we know that fi = cr'[z^] for some cut-free net 
and feedback context a'. Then, using Proposition 13.161 and Lemma 13.81 we have 

= ^{a[a'[u]]) = C:((c7 = Tr^^., (G;(i/)) = 

= Tr,(Tr,,(C;(i.))) = TrM^'W]))) = T^Mt^)), 

where we used the notation o" tt) o"' also to denote the "union" of the nets a,a' . □ 
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3.3. A denotational semantics. As explained in the introduction, a denotational seman- 
tics is an interpretation of the syntax transforming certain given syntactic equivalences into 
denotational equalities. In a syntax such as the A-calculus, or the symmetric combinators, 
the typical equivalence to be modelled is that induced by /3-reduction. As proposed for 
example by Girard |Gir91j . we may describe a denotational semantics of a syntax with a 
reduction relation -w and an internal notion of context as an interpretation satisfying at 
least the following: 

invariance: for any two syntactic objects a,b, a b implies that a and b are deno- 
tationally equal; 

context uality: the semantics induces a congruence on the syntax, i.e., if two syntactic 
objects a,b are denotationally equal, then for every context C, C[a] and C[b] are 
also denotationally equal. 
In this section, we shall prove that our interpretation of nets as edifices satisfies these two 
requirements. Actually, we shall see that, instead of just /^-reduction, edifices model —pne- 

Lemma 3.18. Let -^^lo be the relation of Lemma \1.17[ i.e., a single application of the rjQ 
equation (Fig. oriented from left to right, in which the wire on the right member is an 
axiom. Moreover, let be the contextual closure of the rji equation (Fig. i.e., the 
restriction of to just one application of the equation. For all nets fi, v, we have: 

(1) fj- — >/3e 1^ implies = 

(2) fi -^rio ^ implies = ^{y); 

(3) /.f u implies (B{fi) = ^{ly). 

Proof. Point (1) is an immediate consequence of Proposition 12.301 and of Definition 13.111 

For what concerns point (2), considering the Decomposition Lemma 11.61 we obtain 
fi = o"[/io] and v = ctIvq] such that /iO) ^'o are cut-free and = C[o], vq = C[uj], where o 
is a net matching the left member of the r/o equation of Fig. U and uj is an axiom of vq. 
We suppose that o consists of two 5 cells, the case of two Q cells being perfectly analogous. 
Now, remark that, if yo = addr,y,j {uj) = a b@i ^c(8>(i@j, we have 

ax(/io) = {? G ax(z^o) I P / fo} U {ap i^b@i^cpiS'd@j,aqiS'b@i^cq(S)d@j}. 

Moreover, note that, since fi^Q are cut-free, ax*(^o) = ax(^o) and ax*(z^o) = ax(i/o)- So 
take a G *£(^o)- If is generated by an address in the left term of the above union, then we 
clearly have a G 2(1^0) • Otherwise, we have for example a = apx ®by@i ^ cpx ® dy@j 
for some x,y € C. But in this case too G ^(z^o)) because po S ax(i/o)- Of course a 
similar reasoning applies if we had chosen q instad of p, so 2;(/io) ^ ^(^^o)- Conversely, let 
G 2;(i^o)- Again, if a is generated by p 7^ po; then clearly a G 2;(^o)- Otherwise, we have 
a = ax by @i ^ cx ^ dy @ j for some x,y € C. But x must be of the form px' or qx'; in 
either case, we see that ax(/io) contains an address generating a, so S;(i^o) ^ *^(^o)- Point 
(2) can now be obtained by applying Proposition I3.16t <B{fi) = <B{a[fiQ]) = Tro-((£(^o)) = 

For point (3), we apply again the Decomposition Lemma 11.61 and write fi = o'[fiQ], 
u = a [uq] with /io , z^o cut-free and such that fiQ uq . Observe now that the addresses 
of leaves are invariant under the t]i equation of Fig. UJ hence, ax(//o) = ax(z^o)- Again, 
ax*(/io) = ax(^o) and ax*(z/o) = ax(i/o), because fJ-o^i^o are cut-free. So we have G;(^o) = 
<B{i^o), and we can conclude once more by applying Proposition 13.161 □ 
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Proposition 3.19. For all nets fi^v, /U — /Srye implies ^(/i) = 

Proof. A straightforward consequence of Lemma 13.181 using Lemma 11.171 □ 
Proposition 3.20. Let fi^v he two nets such that G;(/u) = C;(z^). Then, for every context C, 

^{C[^A) = <E{C[u]). 

Proof. Observe that applying a context C to net ^ with n free ports can be done in two 
steps: first, we juxtapose C and ^, forming the net which we denote by C • /i. We stipulate 
that, in C • the free ports of are labelled by 1, . . . , n, whereas the free ports of C are 
"shifted" by n, i.e., they are labelled starting from n + 1. Then, we consider the feedback 
a such that a{i) = i + n for i G {1, . . . , n}, a{i) = i — n ioi i € {n + 1, . . . , 2n}, and a 
is undefined everywhere else. We clearly obtain a[C • jj] = C[/u]. Note furthermore that 
C;(C • )u) = ^(C) U since the two nets are disjoint and do not share free ports by our 

assumption. The result is then an easy consequence of Corollary 13.171 

e;(CM) = ^{a[C . ^]) = Tr,(e:(C . ^l)) = Tr,(e:(C) U = 

= TV,(G;(C) U ^{u)) = T¥,(e;(C . u)) = . ^Ji]) = ^(CM). 

□ 

4. Full Abstraction 

4.1. Edifices and the Cantor topology. Our aim now is to show that edifices are able 
to fully characterize the observational equivalences introduced in Sect. 12.11 For this, we 
shall take the sets introduced in Definition 13.11 and equip them with topological structures 
based on the Cantor topology. This will be needed for two reasons: first, to characterize the 
edifices which are interpretations of /3e-normalizable nets, a result which will be fundamental 
in characterizing finitary axiom-equivalence; second, to obtain a characterization of axiom- 
equivalence itself. 

The idea of using topology for semantic purposes is of course far from being new: it 
is enough to think that the very basis of the denotational semantics of the A-calculus is 
Scott's intuition that computability should be interpreted by topological continuity |Sco76j . 
Moreover, also non-Scott topologies have been attached to A-terms to obtain various kinds 
of results (Visser's topology is an example [VisSOj ) . Closer to our work, we can mention the 
work of Kennaway et al. |KKSdV97] . who also used a Cantor-like topology, very similar to 
our own, to define the infinitary A-calculus. 

Definition 4.1 (Arch topology). The set C = {p, q}^ may be equipped with the Cantor 
topology. This is well known to be metrizable, with the distance defined for example by 
dc{x,y) = 2~^, where k is the length of the longest common prefix of x,y. We denote by 
33(2;, r) the open ball of center x and radius r. 

As well known, C x C is also a Cantor space; if we equip N with the discrete topology, 
we can endow the set V of pillars with the product topology. This is also metrizable: if 
= X ^ y @i and v = x' ^ y' @i' , we shall consider the distance 

d{^,v) = may:{dc{x,x'),dc{y,y'),ddiscii,i')}, 

where ddisc is the discrete metric, defined as ddisdhi') = if z = i', and rfdisc(^)^') = 2 if 
i 7^ i'. Therefore, to be "close", two pillars must be based at the same integer. 
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Similarly, we equip A with the product topology; the arch topology, applied on the set 
A of arches, is the quotient topology with respect to the relation ^ of Definition I3.1[ 

The following helps understanding the arch topology: 

Proposition 4.2. The space A is metrizahle; if a = ^ v and a' = ^ v' , the func- 
tion D{a, a') = min{max{d{^,^'),d{v,v')},max{d{S,,v'),d(v, is a distance inducing its 
topology. □ 

In other words, to compare two arches, we overlap them in both possible ways, and we 
take the way that "fits best". The distance D is in fact the standard quotient metric; in 
this case, it collapses to this simple form. 

The space A is not a Cantor space, because it is not compact. In fact, we can give a 
characterization of its compact subsets. Recall from Definition 13.11 that . if I C N, Ai is the 
set of arches based within /. Then, we have 

Proposition 4.3. <t Q A is compact iff it is a closed subset of Aj for some finite I. 

Proof. If <E is compact, then it must be closed; suppose however that (B ^ Ai for all finite /. 
Then, let aij be a sequence of arches spanning all of the i,j where the arches of ^ are based, 
and set Uij = ^ n ^{aij, 2). These are all open sets in the relative topology, and since, for 
all i,j, D(aij, a) < 2 iff a is based at they form an open cover of Now observe that, 
by the same remark on the distance, if we remove any Um^n loose all arches of ^ based 
at m, n. But we have supposed the sequence Oj j to be infinite, so Ui,j is an infinite open 
cover of € admitting no finite subcover, in contradiction with the compactness of C;. 

For the converse, / being finite, it is not hard to show that Vj is homeomorphic to 
C. Therefore, Vj is a Cantor space, hence compact. So Aj is compact, because it is the 
quotient of a product of compact spaces. But a closed subset of a compact space is compact, 
hence the result. □ 

It can be shown that each Ai is also perfect and totally disconnected, which means that 
actually these are all Cantor spaces whenever / is finite. What really matters to us though is 
compactness, which implies completeness (with respect to the metric D of Proposition 14. 2p : 
when / is finite, there is identity between closed, compact, and complete subsets of Ai. 

Vaults are examples of compact edifices: 

Lemma 4.4. Vaults are compact. 

Proof. Let 21 = 2l(y) be a vault, with i = s@i t@j. Clearly 2l(y) C Ai^i^^. Now take an 
arch a = u@i' ^ V @ j' not belonging to 2t(j:). li i' ^ i or j' ^ j, then obviously *B(a, 1) is 
all outside of 2t(f). Otherwise, either s is not a prefix of u, or t is not a prefix of v; suppose 
we are in the first situation, and let k be the length of the longest common prefix between 
u and s. Then, it is easy to see that «B(a, 2-('=+i)) is aU outside of 2l(j:). So 2l(y) is a closed 
subset of A^^ijj, and we conclude by Proposition 14.31 □ 

Observe that vaults are not open: given an arch a € 2t(s@i ^ t@j), any non-empty 
open ball centered at a contains arches of the form su@i ^ tv @j, with u ^ v. 

It turns out that the edifice of a net is compact exactly when the net is /?e-normalizable. 
This result, which we shall now prove, shows why we are interested in the compact sets of 
the arch topology. If a is a finite binary word, we denote by \a\ its length. If A; > \a\, we 
denote by Ck{a) the set of words b of length k such that b = ab' for some word b', i.e., all 
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possible "extensions" of a to length k. Let now y = ao ® &o @ ^ cq (8) do @ J be an address, 
and let = max{|ao|, |6o|, |co|, |(io|}. We define the set of centers of j as 

Ctr((/)) = {axQ ® bxQ @i ^ cxq dxQ @ j \ 

a G Cfcj(ao), b € Cfe,(6o), c G Cfe,(co), d G 0^^(4)1, 
where xq is some fixed infinite word, whose value is irrelevant. Then we set 

0(y)= U *B(a,2-^>+i). 

aeCtr(!:) 

The set is clearly open; additionally, we have 

Lemma 4.5. For every address f , 2l(j:) C ©(j:). □ 

Proof. Let j: = a i^!) b@i - d@j. We assume without loss of generality that a is the 
longest of a, b, c, d. Then, given a = ax by @i ^ cx ^ dy @ j & 21(f), we can always write, 
for some 01,02,03 G W, yi,X2,y3 & C, by = baiyi, cx = CO2X2, dy = da^y^, such that 
\bai\ = |co2| = {da^l = \a\ = k^. By definition, ao = axQ ® baixo @i ^ ca2Xo (8> da^x^ @j is 
a center of p, and we have -D(ao, a) = 2~''' < 2~''f+\ so a G *B(ao, 2~''f +^). □ 

A version of part (2) of Lemma 13.121 can be given for the sets ©(p): 

Lemma 4.6. Let fi be a net, and let p,p' G ax(/i), with p / p'. T/ien, ©(p) fl O(p') = 0. 

Proof. Let p = s@i - P = t'@j', and let p,p' G ax(/i). If i / i' or 

J 7^ j', then the result is obvious. Otherwise, by the same arguments given in the proof of 
Lemma EIEl s and t cannot be prefixes of s' or t', and vice versa. Now, the sets ©(p), ©(p') 
are built precisely so that, whenever u@i ^ v@j G 2l(p) and u' @i ^ v'@j G 2l(p'), s,t 
are prefixes of resp. u, v, and s', t' are prefixes of resp. u' , v'; hence, the two sets cannot have 
any arch in common. □ 

Proposition 4.7. For all fx, <B{fi) is compact iff is Pe-normalizable. 

Proof. The backward implication is a straightforward consequence of Corollary 12.311 and 
Lemma 14.41 (a finite union of compact sets is compact). Suppose now that fi is not 
normalizable. Again thanks to Corollarv 12. 3H we know that ax*(;u) is infinite. Consider 
now the family of sets C(p) H as p varies over ax*(//); by Lemma 14.51 this forms an 
infinite open cover of ^(/i). By Lemma |4.6|, removing any of these sets causes the family 
not to cover 2;(//) anymore; hence, 2:(//) is not compact. □ 

4.2. Closed edifices. Since the edifice of a net is always a subset of Aj with / finite, by 
Proposition 14.31 we have a standard way to "compactify" it: we simply take its topological 
closure, denoted by (•). 

Proposition 4.8. Let I be a finite subset o/N. Then, for every <E C Ai, <E is compact. 

Proof. The arches based outside of / are "too far" to be adherent to <B, therefore its closure 
is still in Aj. By Proposition 14.31 this is enough to ensure compactness. □ 
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Definition 4.9 (Closed edifice of a net, closed trace). Let /i be a net. The closed edifice 
of fi is defined as ^*(/u) = ^(/u). Similarly, if ^ is an edifice and o" is a feedback, the closed 
trace of along a is defined as Tr*(C;) = Tro-((2;). 

Closed edifices also define a denotational semantics of the symmetric combinators. The 
fact that they model —pne is an immediate consequence of Proposition [3T9l because ^(/u) = 
^(i^) quite obviously implies = What is left to prove, is that they yield a 

congruence, which we do next. 

The following result, which is proved by a slightly tricky induction, tells us that if the 
closure of a uniform edifice ^ contains a uniform edifice then the trace sequences of <B 
along any feedback may be arbitrarily approximated by trace sequences of ^ along the same 
feedback. The hypothesis that Q Ai for / finite is needed so that Proposition 14.81 can 
be tacitly applied. 

Lemma 4.10. Let ^ Aj be uniform edifices, with I finite, such that ^ C 5, and let a 
he a feedback. Then, for all a E Tro-((£) and for all e > 0, there exists b € Tro-(5') such that 
D{a,b)<e. 

Proof. Let (£ = {a(s) | s G 5zc\^{^)}, and similarly ^ = \ s G sec\^{^)}. Given e > 

and a trace sequence s = Si, . . . , s„ of G; along a, we shall prove by induction on n that there 
exists a vault 2t C ^ such that 21 C 53(a(s), e). This will be enough to conclude, because 
whenever s is visible, we have 21 C Trcj{^), and any arch in 21 satisfies the thesis. 

In the base case, n = 1, so s consists of a single arch o € £ C 5". By definition, a can be 
arbitrarily approximated in ^, i.e., given arbitrarily long s, t such that a = su<f^i ^ tv @ j , 
there exists b G such that b = su'@i tv'@j. It will then be enough to show that 
^ contains a vault contained in 2l(s@i -—^ t@j), because s,t are arbitrarily long, and 
5^5- Now, by uniformity of ^, we must have b G 2t(so@i ^ to@j) ^ for some 
So, to, and b = sow@i ^ tow@j for some w G C x C. Observe that so,s and tQ,t must 
then be prefixes of each other. Therefore, we have four cases, depending on the possible 
combinations of which is prefix of which: 

• s = sqs' and t = t^t' . Then both s' and t' are prefixes of w, which means that they are 
prefixes of each other. Suppose that t' = s't"; then, b = sqs'w' @i ^ tos't"w' @ j for 
some w' , and 2l(s@^ t@j) The case s' = t's" is symmetric. 

• s = sqs' and = tt'. We have w = s'w', and b = sq.s'w' @i tt's'w' @j, which means 
that 21(5©^-- tt's' @ j) C ^5. 

• sq = ss' and t = tot' . This case is symmetric to the one above. 

• So = ss' and to = tt'. Then we may conclude, because 2l(sow @i ^ tow @ j) C 2t(s @i ^ 
t@j). 

Let now n > 1, and let 5 = Si, . . . ,Sn,Sn+i. If we put s' = Si, . . . ,5n, by Proposi- 
tion 13.101 we have that a(s') is uniform in <E; furthermore, by hypothesis, 5„+i is uniform 
in C;. Hence, there exist rQ, sq, si,to and h,i,j,l such that 

a(s') G 2l(ro @h^ so@i) C 
s„+i G 2t(si @j '-^to@l) <^ (B, 

with a{i) = j. Actually, we may always suppose si = sq. In fact, by the match condition, 
so,si are prefixes of each other; suppose for instance that sq = sis'; then, we have o(s') G 
2t(ros'@/i ^ si@i), which is still contained in <E. A symmetric argument applies in case 
si = sqs'. 
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Let US now apply the induction hypothesis, obtaining 2l(r@/i ^ s@i) C 5^, with 
r = r^r' and s = sqs' . The length of r' , s' depends on how much we want to approximate 
o(s'); in fact, we know that the induction hypothesis allows us to use any approximation, 
as precise as we want. Now, observe that, thanks to the match condition, sqs' and tos' 
are prefixes of the words in s^+i; therefore, because our ultimate goal is to approach a(s) 
within distance e, we apply the induction hypothesis with an e' small enough so that r and 
Iqs' are long enough prefixes of the words contained in a(s) to satisfy the requirement, i.e., 
so that, for all u,v £ C x C, we have D{a{5),ru @h ^ Iqs'v @) < e. 

Now, observe that 2t(so@j ^ to @ — ^ — 5^ means that all of the arches of 
this vault can be arbitrarily approximated in 5^; this applies in particular to the arches 
of the vault 2l(sos'@j ^ tos'@l), which implies, by uniformity of ^, that there exist 
s",t" such that 2li = 2t(sos's" (o) j tos't" @l) C ^. But remark now that we have 
2to = 2l(rs" @h ss" @i) = ^{rs" @h ^ sqs's" @i) C 5, so, given any w e C x C, & trace 
sequence t' generating the arch rs"'w @h ^ sos's"w @i of 2to may be extended with the 
arch sqs' s"'w @ j ^ tos't"w @l of 2ti, yielding a trace sequence t of 5^ along a, such that 

a(t) = rs"w @ /i ^ tos't"w @ I, 

which satisfies D{a{s), a{t)) < e, because we chose r,s' appropriately when we applied the 
induction hypothesis. □ 

Thanks to Lemma [4.101 we can prove that if two uniform edifices have the same closure, 
then their closed traces coincide, with respect to any feedback. The congruence property of 
closed edifices is obtained as an easy corollary, with the help of Corollary 13.171 

Proposition 4.11. Let ^, 5^ C Ai be uniform edifices, with I finite, and let a he a feedback. 
Then, (2; = 5^ implies Tr*((2;) = Tr*(5'). 

Proof. By symmetry, and since G; C it is enough to show that ^ C J implies Tr*(G;) C 
Tr* (^5"). So suppose that £ is a subset of the closure of and let a G Tr* (S;). By definition, 
there exists a sequence (a„)ngN £ Tro-(C;) such that a. Let now = 2""*, for m G N. 

If we apply Lemma [4.101 to each a„ and for each e^, we obtain a sequence (b5^)m,neN £ 
Tro-(5) such that, for all m,n € N, L'(a„, b^) < em- Consider now the diagonalization of 
such sequence, i.e., the sequence (a^)neN G '~^a{^) defined by setting = b", for all n € N. 
We contend that a, which is enough to conclude. So let e > 0. S ince — > ci, there 

exists iV G N such that, for all n > N, D{a, an) < e/2. Similarly, let M be smallest integer 
such that €m < e/2, and let K = max{M, N). We then have, for all n> K, 

D{a, a'J < D{a, a„) + D{an, a'J = D{a, a„) + D{an, b^J) < e, 

which proves that a'^ tends to a as n grows to infinity, as desired. □ 

Corollary 4.12. Let fj,,!^ be two nets such that = Then, for every context C, 

C:-(CM) = C:-(CM). 

Proof. We use the notation of the proof of Proposition 13.201 for juxtaposing nets, i.e., we 
denote by C • /i the juxtaposition of C and n, so that C[ij] may be written as a[C • fj] for a 
suitable feedback a. Now, observe that the arches of €(C) and are based at different 
integers, so that the closure of these two edifices is completely disjoint. The same remark 
applies to (£(C) and hence, we have (£'(C • /i) = <B'{C) U ^•(^) = (£'(C) U = 

C;*(C • I'). Then, using Corollarv 13.171 and Proposition 14.11] , we may write 
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□ 



4.3. Characterizing observational equivalence. Obtaining a semantic characterization 
of an observational equivalence involves two results: the proof of a first statement, usually 
referred to as the adequacy of the semantics, establishing that denotational equality implies 
observational equivalence; and the proof of the converse, i.e., that observational equivalence 
implies denotational equality, which is usually known as full abstraction. 

The presence of both results is often simply referred to as a "full abstraction result" , 
because the second property is in most cases harder to obtain, and is thus the fundamental 
one. In fact, adequacy is an immediate consequence of the following two properties: 

contextuality: the semantics induces a congruence on the syntax, i.e., if two syntactic 
objects a,b are denotationally equal, then for every context C, C[a] and C[b] are 
also denotationally equal; 
discrimination: the semantics is able to discriminate between the two classes of syn- 
tactic objects used to define the observational equivalence, i.e., if the set S is the 
basis of the equivalence, as described in Sect. 12. H then for any a G S and b ^ S, 
one must have that a and b are denotationally different. 
To see that adequacy follows from the above two properties, consider the contrapositive 
statement: let a, b be observationally different, i.e., suppose there exists C such that C[a] G 
S and C[b] S; by discrimination, we obtain that C[a] and C[b] are denotationally different, 
so we conclude by contextuality. Note that this latter property is usually taken as a basic 
property of denotational semantics, i.e., all semantics are assumed to verify it, as described 
in Sect. 13. 3i Hence, all that is left to verify is the discrimination property, which is often 
not so hard to obtain. This is why, in most cases, full abstraction receives all the attention. 
Nevertheless, this does not mean that adequacy itself is banal: for instance, our proofs of the 
contextuality property for edifices and closed edifices (Proposition 13.20] and Corollarv l4.12l 
respectively) are far from being trivial. 

So, we start by ensuring that edifices enjoy the discrimination property with respect 
to finitary axiom-equivalence. For this, we use the topological characterization based on 
compactness (Proposition 14. 7p : 

Lemma 4.13. For all nets /i, i^, and z^ffr implies ^(/i) 7^ 2;(i^). 

Proof. Simply observe that, by Proposition 14. 7t is non-empty and compact, while <£{i^) 
is either empty, or not compact. □ 

We now have our first full abstraction result: 

Theorem 4.14 (Full abstraction for =). For all nets ii,v, ii = u iff = ^{v). 

Proof. As discussed above, the implication from right to left, or the adequacy property, is a 
consequence of Proposition 13.201 and Lemma I4.13| so let us examine directly the converse, 
or rather its contrapositive. Suppose that C;(^) 7^ ^(z^), and let a G <£(Ai) \ <£(i^) (we are 
supposing without loss of generality that G;(^) is not contained in ^(z^)). We then have 
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where the observable axiom shown generates o, whereas, by Lemma 11.16^ 



and no reduct of z^' develops a connection between the ports i,j generating a. Now consider 
the test 



By Lemma ll.9|, 0[fi] e-reduces to a quasi-wire (c/. Fig. I14p. so ^[/i]JJ^. On the contrary, Olv] 
reduces to a net with 2 free ports which cannot be /?r/-equivalent to a wire, otherwise we 
would have o € We have two possibilities: either 0[z^] is /3e-normalizable, or it is not. 

In the latter case, by Corollarv 12.311 we have 0[z^]tlT, so we are done. In the former case, 
we take the normal forms of 6[fj] and ^[z^], which are cut-free by Proposition 12.291 and 
conclude by applying the Separation Theorem 11.181 □ 

The fact that closed edifices enjoy the discrimination property with respect to axiom- 
equivalence is trivial, and no special topological property is needed to prove it: 

Lemma 4.15. For all nets /x, i^, ^ and ;/f|~ implies 7^ 2;*(z^). 

Proof. is non-empty (it contains at least one vault), and the closure of a non-empty 

set is non-empty; on the contrary, is empty, and so is its closure. □ 

By contrast, in the case of axiom-equivalence, compactness (and hence completeness) 
becomes essential for yielding a fully- abstract denotational semantics. It is crucial in the 
proof of the following result: 

Lemma 4.16. Let /i, be such that ^*(/u) 7^ (B-'{u). Then, one of the following holds: 

• there exists an observable axiom j € ax*(/i) such that 2t(f) C C;(/u) \ G;*(z^); 

• there exists an observable axiom € ax*(z/) such that 2t(ti) C G;(i') \ (B.'{p). 

Proof. Let fi have n free ports, and suppose, without loss of generality, that there exists 
a € ^*(/i) \ 2;*(i^), based at i,j G {1, . . . ,n}. Remember that C;*(/u) and are defined 

as the closures of resp. and ^(z^), and that by Proposition 14.81 thev are both compact, 
hence complete. Then, if a € <B'{fi)\<E{fj,), a must be a "missing limit" of a Cauchy sequence 
(an)nGN of <£(/^). Since a subsequence of a Cauchy sequence is still a Cauchy sequence, there 
must exists an integer m such that, for all n > m, a„ S 2;(/u) \ otherwise a would 

belong to ^'{i^) because of its completeness. Therefore, modulo replacing it by one of 
these a„, we can always assume that a € C;(/u) \ C;'(i^). If it is so, then by Definition 13.111 
there exists p = s@i ^ t@j G ax*(^) such that a S 2t(p) C C;(^), which means that 
a = swo@i ^ twQ@j and, for every w S C x C, sw@i ^ tw@j € ^(^)- Now let 
s'l, . . . , s'^, . . . he a sequence of prefixes of increasing length of wq, and set, for all n, Sn = ss^ 
and tn = ts'j^. Suppose that, for all n, there exist two pairs of infinite words Vn such 
that a„ = SnUn@i ^ tnVn@j € 2;*(i^); it is not hard to verify that the arches a„ would 
form a Cauchy sequence of limit a, and thus, by the completeness of C;'(i^), we would obtain 
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a € <£-*{i'), a contradiction. Therefore, there must exist an integer n such that, for all w, 

SnW@i ^tnW@j e □ 

To prove full abstraction for ~, we first need the following separation result: 

Lemma 4.17. Let W be a quasi-wire (Fig.\H\j, and let ^ he a net with two free ports, such 
that s@i ^ t@j G ax*(/x) implies i = j. Then, there exists a test 9 such that 6[W]i}- and 

Proof. If /iff, the identity test suffices, so suppose fj,]}.. By hypothesis, all observable paths 
appearing in the reducts of fi connect one of the free ports to itself. Therefore, there exists 
fi' such that fi fi' , and 




In the above picture, we have supposed that the observable path connects the free port 1 to 
itself, and that the leaves connected by the observable axiom are the two "leftmost" leaves 
of T. These are just graphically convenient assumptions, causing no loss of generality: the 
observable path may as well connect port 2 to itself, and the leaves connected may be any 
two leaves of r. Now, if we define 




we have that, thanks to Lemma 11.9^ 9[W] W, while 9[fj] reduces to a net whose free 
port 1 is connected to an e cell. If this net is blind, we are done; otherwise, there is a reduct 
of 9[fj] containing an observable path between the free port 2 and itself. This observable 
path can be "eliminated" with the same technique, while the e cell on port 1 will "eat" any 
tree fed to it, so in the end we obtain a test 9' such that 9'[W] W while 9'[^]i\, as 
desired. □ 

We are now ready to prove our second full abstraction theorem: 

Theorem 4.18 (Full abstraction for ~). For all nets i^, ji u iff = S*(z^). 

Proof. Once again, the adequacy property, i.e., the backward implication, is a consequence 
of Corollary 14.121 and Lemma 14.151 so let us turn to the actual full abstraction property. 
For this, we consider the contrapositive statement, and assume 7^ '^'i^)- Let / 

be the interface of /i and i^. By Lemma I4.16| we know that there exist i,j € / and 
^ = s@i ^ t@j £ ax*(//) such that, for ah w, sw@i ^ tw@j e 2t(j:) \ S'(z^) (it could 
actually be that these arches belong to 2t(t)) \ <B'{fi), where t) G ax*(i/), but obviously our 
assumption causes no loss of generality). We shall suppose i j; the reader is invited to 
check that the argument can be adapted to the case i = j. Since f € ax*(/z), we have 
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s / 













i j 



where we have explicitly drawn the observable axiom of address j. On the other hand, by 
Lemma ll.l6l we have 




i j 



where we have called k and I the two free ports of u' corresponding resp. to the addresses t 
and s in and Tj. Observe that, by the fact that closed edifices model ^/3,,£, the edifice of the 
net on the right is still Now if, in any reduct of u' , there appeared an observable path 

between k and /, then we would contradict the fact that, for all w, sw@i tw@j S;*(z^). 
Therefore, no observable path ever appears between k and I in any reduct of v'. 
Consider then the test 



j 




s t 



where we have left free only the leaves corresponding to the addresses s and t of Tj and Tj. 
Now, by Lemma 1 1. 9 ( /3-reduces to a quasi- wire; on the other hand, we have 




k I 



But v' never develops observable paths between k and I, so Lemma 14.171 applies, and we 
obtain ^ v. □ 

By inspecting the proofs of Theorems 14.141 and 14.181 we see that only tests are used to 
discriminate nets. Since those two results say precisely that equality of edifices and closed 
edifices coincides with finitary axiom-equivalence and axiom-equivalence, respectively, we 
get the following Context Lemma for free: 



Lemma 4.19 (Context), fi = u (resp. fi u) iff, for every test 6, 6[^^ iff 9[v]^ (resp. 

e[iA^iffe[u]\^). □ 



46 



D. MAZZA 




Figure 15: A non-/3e-normalizable net observationally equivalent to a wire. 

Furthermore, combined with Proposition 13.191 Theorem 14.141 gives us that (3r]£- 
equivalence is included in finitary axiom-equivalence (and hence in axiom-equivalence, by 
Proposition 12. 23| : in Sect. 15.31 we shah see that this inclusion is strict (c/. Fig. [T9]) . 

Corollary 4.20. For every nets fi, u, fi —p-qe ^ implies fi = i/. □ 

On the other hand, as an application of Theorem 14.181 we give an example showing 
that the inclusion of Proposition 12.231 is strict, i.e., that there exist axiom-equivalent nets 
which are not finitarily axiom-equivalent. Such example is based on a net which is not 
/3e-normalizable, and yet is observationally equivalent to a wire. This is analogous to 
Wadsworth's "infinitely ry-expanding" term J = RR, where R = Xxzy.z{xxy), which is well 
known to be hnf-equivalent to Xz.z. 

Consider a net l reducing as in Fig. [T5j Such a net exists by what we have shown in 
Sect. 11.3] furthermore, after constructing it, one can see that l is not immediately observable, 
and that j: G ax*(i) iff j: = q"p (8) 1 (Q) 1 q"p (X) 1 @ 2 for some non-negative integer n. On 
the other hand, if to denotes a wire, we have 

= (£(u;) = {n@l ^ ii@2 ; Vu G C x C}. 

Now, if q°° denotes an infinite sequence of q's, all arches of the form 

ay = (g) y @1 ^ (f° (g> y @2 

are missing from hence ^ ^(<j^)- But these arches are all adherent to in fact, 
it is very easy to construct a Cauchy sequence in <B{l) of limit Oy, for any y. Therefore, 
^•(i,) = (£*(a;), and l ~ W. On the other hand, l ^ co, and we do not need Theorem 14.141 
to prove that: in fact, the identity is a context discriminating between the two nets. 

Note that the reducts of l are "almost" ry-equivalent to a wire: there is just one missing 
connection. We can say that this connection forms "in the limit", when the reduction is 
carried on forever. When one interprets nets as edifices, this informal remark becomes a 
precise topological fact, i.e., we have a true limit. 

5. Concluding Remarks 

5.1. Comparison with previous work. The first notion of observational equivalence for 
interaction nets introduced in the literature is due to Bechet |Bec92j . In his work, the 
author mentions a notion of behavioral equivalence based on Girard's coherence spaces 
|Gir87| . However, we have not been able to reformulate this equivalence so as to compare 
it to the ones studied in the present paper. 

The situation is different with Fernandez and Mackie's work |FM03j . the only other 
existing work on observational equivalence for interaction nets, for which we have precise 
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Figure 16: Visible ports; a is any symbol, and r any tree. 

results. First of all, we may note that Fernandez and Mackie's approach is more general, 
i.e., it applies to all systems of interaction nets, not just to the symmetric interaction com- 
binators. However, we have already mentioned that our notion of observable and finitarily 
observable net can also be generalized to arbitrary systems of interaction nets, as shown in 
the author's Ph.D. thesis |Maz06j : the details of this generalization are out of the scope of 
this paper though. 

What is more interesting is to compare our notions of observational equivalence with 
the specialization of Fernandez and Mackie's observational equivalence to the symmetric 
interaction combinators, which we shall call here visible equivalence. It can be formulated 
as follows: 

Definition 5.1 (Visible port, visible equivalence |FM03j ). Let /i be a net with n free ports, 
and let 1 < i < n. We say that i is immediately visible in /i iff has one of the shapes 

given in Fig. [I6l We say that i is visible in /i, and we write /xJ|j, iff fi — >^ fj.' such that i is 

immediately visible in fj,'. We write yuffj for the negation of fj^j-^. 

Given two nets /i, v with n free ports, we say that /i and u are visibly equivalent, and 

we write /i ~ i^, iff, for every 1 < i < n and for every context C, C[;u]JJ-,j iff C[i/]JJ-j. 

Fernandez and Mackie |FM03| also give, in case a port i is visible, a notion of visible 
agent at i, and require furthermore that either the visible agents at i of C[^] and C[u] 
are the same, or that one of such visible agents is not a constructor. In interaction net 
systems, a constructor is simply a symbol declared to be such, i.e., it is not an intrinsic 
notion. Declaring symbols to be constructors may be useful from an "intentional" point 
view, when one has in mind a particular semantics for the given interaction net system. 
In the symmetric combinators, because cells with the same symbol may interact, there are 
arguably no constructors, hence the simplified definition we give here. 

Note that, as defined above, visible equivalence does not quite fit in the general pattern 
of Morris-like observational equivalences discussed in Sect. 12.11 because it is defined "port- 
wise", i.e., it takes free ports into account. In other words, visibility is a property of free 
ports, not of nets. However, Fernandez and Mackie's definition can easily be adjusted so as 
to conform to Morris' pattern. 

Definition 5.2 (Visible net). Let be a net with n free ports. We say that is visible, 
and we write fj^j-, iff yuJJ-j for some 1 < i < n. 

Lemma 5.3. Let ^ be a net with n free ports, let \ < i < n, and let 
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Then, u\y iff ^J^i- 

Proof. For the backward implication, by definition ^ reduces to a net of one of the shapes 
given in Fig. [TBI In the case on the left, the appearance of the a cell is not modified by the 
e cells in u] in the case on the right, simply observe that the e cell plugged at the root of r 
will "eat" the tree until arriving at free port i. For the forward implication, we have that 
only the left case of Fig. [16] is possible, i.e., there is a reduct of v in which the principal 
port of a cell c appears at its only free port. Note that e cells only produce e cells through 
interaction. Hence, if c is not an e cell, it already appears in if c is an e cell, either it 
already appears in or c "comes from" one of the e cells plugged to /.t in u. Then, it is not 
hard to see that ^ must reduce to a net of the shape at the right of Fig. [TU with the e cell 
"producing" c being the one plugged to the root of r. □ 

Proposition 5.4. For all nets ^^v, iff, for every context C, C[^]JJ- iff C[v\\^. 

Proof. The forward implication is trivial; for what concerns the converse, consider the 

contrapositive statement: there exist C and 1 < i < n such that, for instance, C[/i]JJ-j 

and C[z^]ftj- Then, let E be the context plugging e cells to all free ports of C[//] and C[u\ 

except i; by Lemma [531 we have -E[C[/i]]J| and £'[C[z^]]ff, as desired. □ 

In their paper |FM03| . the authors prove that C ss, so, by Proposition I1.19[ we 
have that ~ coincides with on total nets, just like all the other equivalences introduced 
in this paper (except of course —p). However, the situation is quite different if we consider 
non-total nets; indeed, we can show that visible equivalence is strictly stronger than finitary 
axiom-equivalence (and, by Proposition 12.231 than axiom-equivalence). 

Lemma 5.5. Let fj,, v he two nets with the same interface, and let C be a context such that 
C[/i] reduces to a quasi-wire, while C[z^] reduces to a net whose one of the two free ports is 
connected to a principal port. Then, [i'^ v. 

Proof. Simply consider the context 



c 




where a is any binary symbol, and we have supposed, without loss of generality, that the 
free port of the reduct of C\y\ which is connected to the principal port is the one on the left 
in the above picture (while the free ports drawn at the top of the picture are those that are 
connected to \i and v in C[/i] and C\y\, respectively). Then, we have, for some net without 
interface o, some symbol /?, and some net fo. 
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CM 

so that C'[fi]i[, whereas C'^JJ.. □ 
Lemma 5.6. Let and z^ft^. Then, ^ v. 

Proof. By Proposition 12.221 there exists a test 9 such that reduced to a quasi- wire. On 
the other hand, by Lemma 12.211 we stih have Observe that, if i is any of the two free 

ports of ^[^], we have 0[/i]JJ-j. Now, if one of the two free ports of 9[v\ is not visible, we are 
done. We may then assume 9[v\ z/', where both free ports of v' are immediately visible; 
then, they must both be connected to a principal port, otherwise v' would be immediately 
observable (c/. Fig. [TBI right), whereas we know it to be blind. We may therefore conclude 
by applying Lemma [531 □ 

The fact that visible equivalence is stronger than finitary axiom-equivalence is a trivial 
corollary of the following: 

Proposition 5.7. Let and z^ttT- Then, /x 56 z/. 

Proof. Let ^ and v have n free ports. We have two possibilities: either z^f^, or ax*(z/) is 
infinite. In the first case, observe that /iJJJ- implies /iJJ-, so we conclude by Lemma 15.61 In 
the second case, since ax*(//) is finite, there must exist 1 < i, j < n and pairs of words s,t 
such that s@i^t@jG ax*(i/) \ ax*(^). Now, s and t describe two trees Ts,Tt and a leaf 
in each of them, such that 





i j 



where the wire shown connects the two leaves of Ts,Tt described by s,t, respectively. Con- 
sider then the test 




where the only leaves of Ts,Tt left free are again those described by s,t, respectively. We 
obviously have that ^[z>] /^-reduces to a quasi- wire; on the contrary, because of the way we 
have chosen s and t, 9[fi] is not /3?7-equivalent to a wire. Observe however that ax*{9[fj]) is 
still finite (although it may now be empty). Then, we may consider the /3e-normal forms 
of 9[i'] and which exist by Corollarv I2.31[ and apply the Separation Theorem 11.181 
to them. We thus obtain a further test 9' such that ^'[^[/i]] /3-reduces to a quasi- wire and 
0'[0[z/]]'(y, or vice versa. In any case, we reason as in the proof of Lemma l5.6t if one of the 
ports of the blind net is not visible, we conclude; otherwise, we apply Lemma [531 □ 
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Figure 17: Two nets showing that visible equivalence is more discriminative than finitary 
axiom-equivalence; a is any binary symbol. 



Figure 18: The parallelizing context for nets with n free ports; v is an arbitrary net. 
Corollary 5.8. For all nets I-L, u, k v implies fi = ly. 

Proof. Consider the contrapositive statement: v implies that there exists C such that, 
for example, C[/i]4^ and C[i^]tlT; by Proposition 15. 7^ we have C[/i] 96 C[v], so we conclude 
/i 96 by using the fact that ~ is a congruence. □ 

To see that visible equivalence is strictly stronger than finitary equivalence, consider 
the nets of Fig. [T7) the only free port of = Ei is visible, while the only free port of v is 
not visible, so ^ u; on the contrary, the edifice of both nets is empty, so by Theorem 14.141 
we have ^ = v. 

An intuitive justification to Corollary 15.81 and to the example of Fig. [T7] is that the 
difference between a visible and an observable net is seemingly akin to the difference between 
a head-normalizable and a weafc-head-normalizable A-term. In fact, the two cases of Fig. [T6l 
are strikingly similar to the cases Xx.M (left) and xMi . . . M„ (right) defining weak head 
normal forms: the latter case is a special case of observable net, just like xMi . . . is 
a special case of head-normal-form; the former case guarantees that a net visible on port 
i is "reactive" when we plug the principal port of a cell to i itself, i.e., an active pair is 
created, just like Xx.M is "reactive" to application (a redex is created). In the A-calculus, 
whnf-equivalence is strictly stronger than nf- and hnf-equivalence |DCGOlj ; this is in accord 
with our intuition about visible equivalence and (finitary) axiom-equivalence. 

5.2. Approximations and the Genericity Lemma. In the A-calculus, unsolvable terms 
are important because they represent meaningless data. One of the main formal arguments 
in favor of this intuition is the so-called Genericity Lemma |Bar84j : let M be an unsolvable 
A-term, and let C be such that C[M] is normalizable; then, C[X] ~^ C[M] for every A-term 
X. In other words, if we see C[-] as a function, the only functions which are able to produce 
something meaningful (a normal form) out of unsolvable terms are the constant functions, 
confirming the fact that unsolvable terms are meaningless. 

In the symmetric interaction combinators, a word- by- word rephrasing of the Genericity 
Lemma fails; this is because of two interesting differences with respect to the A-calculus: 

• the intrinsic parallelism of interaction nets, which has no equivalent in the A-calculus; 

• the fact that, for every n S N, there is an unsolvable net with n free ports which is 
cut-free, hence normal (namely, the net we called E„); by contrast, no normal A-term can 
be unsolvable. 
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Indeed, consider the context given in Fig. [TSl We may refer to this context as the 
"paralleUzing" context: in fact, for every net fi with n free ports, Pui^j] = fJ, • i", i.e., 
the juxtaposition of and v. Now, let be a net which is normahzable, or total, or 
finitarily observable, and take the unsolvable net E^. Clearly P^[E„] is normalizable, or 
total, or finitarily observable, but there always exists a net such that Pu[£,] need not be 
normalizable, or total, or finitarily observable, let alone /3-equivalent to P^[E.„]. This is 
because ^ and do not interact, so the properties of Pu[C] basically depend solely on ^. 

However, there is a reformulation of the Genericity Lemma which holds for the sym- 
metric interaction combinators, and which supports the fact that our notion of unsolvable 
net coincides indeed with that of meaningless data. Take an unsolvable net /i, and take a 
context C. Then, we can prove that, whenever 











1 ■■■ 1 


c 




Co 



such that Co is cut-free and none of the wires connecting Cq to fiQ is a cut, we have that, 
for every net ^ with the same number of free ports as there exists such that 









1 ■■■ 1 ^* 


1 ■■■ 1 


c 







In other words, every bit of information in the result of the computation represented by 
C[/i] is also present in C[^], for all ^, which means that n actually does not produce any 
information, and is thus meaningless. 

The above concept of "bit of information" may be formalized by the notion of approx- 
imation: 

Definition 5.9 (Approximation). Let /i be a net. An approximation of /i is a cut-free net 
z/ such that: 

• 1^ = C[E„,] for some context C and n € N; 

• fi — >^ C[fio] for some fiQ with n free ports. 

If v is an approximation of /i, we write ly Q fi. 

Intuitively, an approximation of /i is a "piece" of the hypothetical cut-free form of /i, 
i.e., it gives a partial information on the result of the computation represented by /i. The 
least information, or the lack thereof, is E„, which is an approximation of every net with n 
free ports. If a net is total, then its cut-free form is also an approximation of it, the most 
complete one indeed. 

Approximations and edifices are related by the following, whose proof is left to the 
reader: 



Proposition 5.10. Let ^ he a net, and let u he a cut-free net with the same interface as 
fi. Then, uQn iff ^{v) ^ ^(^). □ 
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The above result confirms in particular the idea that the edifice of a net may be seen 
as its "infinite cut-free form". Indeed, the relation C can be made a partial order, and the 
set of approximations of a net can be shown to be a directed set. However, the order given 
by C is not complete, so this set has no least upper bound in general; to make it complete, 
one should introduce infinite cut-free nets, which is more or less what edifices are. 

We may then state the Genericity Lemma as follows: 

Lemma 5.11 (Genericity). Let fi be an unsolvable net with n free ports. Then, for every 
context C and for every net ^ with n free ports, v C C[^] implies v ^ C\^. 

Proof. By Proposition 12.221 we have //ff, so ^(/x) = 0. Hence, we can write, using Corol- 
lary [STTZl Lemma [321 and the decomposition C[fi] = a[C • fi] for a suitable feedback a, 

e(CM) = Tr.((5(C) U ^(/i)) = Tr.(C;(C)) C Tr,(e(C7) U £(0) = ^(^[^1). 

Now, by Proposition Eini u C C[fj] implies C (B{C[fi]), so C (£(C[^]), and we 

conclude u C C[S] again by Proposition 15.101 □ 

5.3. Theories for the symmetric interaction combinators. In the foundational stud- 
ies concerning the A-calculus, an important role is played by X-theories [Bar841[LS04j . These 
can be straight-forwardly be reformulated in the context of the symmetric interaction com- 
binators: 

Definition 5.12 (Theory). A theory is a binary relation ~ on nets such that: 

(1) ~ relates nets with the same interface; 

(2) ~ is a congruence; 

(3) ^pC^. 

The set of theories T is a complete bounded lattice with respect to inclusion: given any 
family of theories (~j)jg/, the least upper bound (lub) is defined by (Uig/ ~i)'''5 and the 
greatest lower bound (gib) by Hig/ the least element is and the greatest element is 
the inconsistent theory T, which equates all nets with the same interface. 

Much effort has been put forth in order to understand the structure of the lattice of 
A-theories; quite a few things are known about it |Vis80l [Bar841 [LS04] . and many more are 
the subject of ongoing research |BMS07[ IBS081 IBMS091 [CS09j . In the case of the symmetric 
combinators, we suspect the structure of T to be at least as intricate as in the case of the 
A-calculus. In this section, we gather everything we presently know about it (which is 
arguably not much!), leaving several questions open for further work. 

As in the case of the A-calculus, we may define sensible and semi-sensible theories, based 
on the fact that unsolvable nets are meaningless, and it is therefore sensible to identify all 
of them: 

Definition 5.13 (Sensible and semi-sensible theory). A theory ~ is sensible iff, for all fi, v 
unsolvable, /x ~ i/. A theory ~ is semi-sensible iff /i ~ i/ implies // solvable iff v solvable. 

Note that any theory containing a sensible theory is sensible, while any theory contained 
in a semi-sensible theory is semi-sensible (these are both immediate consequences of the 
definition). The two notions are related as follows. 

Lemma 5.14. Let ^ be a sensible theory. Then: 
(1) for every blind net fi with n free ports, /i ~ 
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(2) for every quasi-wire W , W ^ lv, where lo is a wire. 

Proof. Point (1) is obvious (modulo Proposition l2.22p . For point (2), observe that W = uj[o], 
where o is some net without interface, necessarily blind; moreover, note that to = uj[^q], 
where Eq is the empty net. Now, by point (1), a Eq; but then we can conclude, because 
~ is a congruence. □ 

Proposition 5.15. A consistent sensible theory is semi-sensible. 

Proof. Let be a sensible theory, and let ^JJ- and i^lj. We shall prove that ^ ~ implies 
~= T. First of all, by Proposition 12.22] by the fact that ~ includes /^-equivalence, and by 
point (2) of Lemma [5.141 there exists a test 9 such that 9[ij] ~ uj. On the other hand, by 
Lemma |2.21|, and by point (1) of Lemma 15.14^ we have Olv] ~ E2. But is a congruence, 
so UJ E2, and we may conclude by Proposition [TTT9J □ 

Apart from in the course of this paper we introduced several theories: — /jjj, — /3e, 
=, ~, and ~ (the first and the last were actually introduced by Fernandez and Mackie, 
cf. Sect. 15. ip . All of them are semi-sensible, because they are all included in ~, which is 
semi-sensible by definition. Furthermore, since ~/3e is sensible by definition (e-reduction 
equates precisely all unsolvable nets), all the theories including it are also sensible, namely 
=, and ~. On the contrary, ~/3, '^/3rf, and are not sensible: Fig. [TTl gives an example 
of two unsolvable nets which are distinguished by all of these theories. 

Indeed, Fernandez and Mackie's equivalence is an example of non-sensible theory which 
strictly extends /Jr^-equivalence, and stands quite on its own with respect to the other 
theories discussed in this paper. For instance, it is completely orthogonal to /?e-equivalence: 
this latter is not included in ~, as shown again by the example of Fig. [TTl and ~ is not 
included in —pe, because the former includes ry-equivalence. On the other hand, although 
the example of Fig. [17] tells us that —i3ri£ is not included in ~, we know nothing about the 
converse. All we know is that ~ is strictly contained in = (Corollary 15.81 and Fig. I17p . 

What about consistent sensible theories in general? First of all, observe that the lub 
and gib of a family of sensible theories is sensible, so the set of sensible theories is a complete 
sub-lattice of T, which is actually bounded. The least element is obviously — /je, because it 
is defined so as to validate exactly /3-equivalence plus equality of every unsolvable net. The 
greatest element turns out to be ~; in fact, this can be shown to be a coatom of T, i.e., a 
maximal consistent theory (so ~ is also the greatest semi-sensible theory). 

Proposition 5.16. Let ^ be a theory such that Then, T. 

Proof. We start by observing that ~ is sensible, because it includes ~. Now, let fi v, 
with /i 9^ I/. We then have a context C such that, for example, C[//]-|J- and C[i^]'fl~. But ~ is a 
congruence, so C[n\ ~ C[iy], which proves that ~ is not semi-sensible. By Proposition 15.151 
the only sensible theory which is not semi-sensible is T. □ 

So far, the situation is identical to the case of the A-calculus, in which the lattice of 
consistent sensible A-theories has least element —pn (also known as TC) and greatest element 
hnf-equivalence (also known as 7i*). 

In between the two, there is —/Sr^n, which coincides with nf-equivalence (also denoted 
by TCr]). Here we find the first sharp difference with respect to the A-calculus: '^jSr^e, which 
is analogous to — /jj^rji does not coincide with =, which, morally, is the counterpart of nf- 
equivalence. In fact, the converse of Corollary 14.201 fails: the two nets of Fig. [19] give an 
interesting example of this. They can be built by slightly twisting the constructions given 
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Figure 19: Nets showing that fi = u does not imply fj, —prie ^■ 

in Sect. II. 3i It is not hard to show that /^i '^^rje fJ'2] in some sense, the two nets endlessly 
"chase" each other in their reduction, never managing to meet. And yet, it is evident 
that they generate exactly the same observable axioms, i.e., ax*(/ii) = ax*(/i2). Therefore, 
^(/ii) = ^(/i2)) and III = //2 by Theorem 14.141 Note how the parallelism of interaction 
nets, absent in the A-calculus, plays once again a crucial role in this example. If we use the 
analogy that observable axioms are head variables, here we are clearly exploiting the fact 
that interaction nets allow several head variables in parallel: although and ^2 have the 
same "head variables" , they "produce" them in a different order. 

In the A-calculus, it is possible to show that between Tirj and Ti* there is a continuum 
of sensible theories |Bar84j ; we ignore whether this is the case for the symmetric interaction 
combinators. Indeed, a related open question is the existence of easy nets, i.e., nets which 
can be consistently equated with any other net with the same interface. A first difference 
with the A-calculus is that E2, which is the prototypical unsolvable net with 2 free ports, is 
not easy (Proposition II . 19l shows that there is no consistent theory equating it with a wire); 
on the contrary, the A-term Q, which is the prototypical unsolvable term, can be shown to 
be easy. 

Finally, we give an example of a consistent non-semi-sensible theory. Define total equiv- 
alence as /X ~t iff, for every context C, C[fj] is total iff C[i^] is total. It can be shown that 
r/-equivalence does not alter totality, so ^jSrjQ^t- Moreover, observe that total equivalence 
is the only theory we introduced which distinguishes between the empty net Eq (which is 
total) from all other nets with no interface not reducing to Eq (which are not total). This 
proves in particular that the theory is consistent. 

However, consider the net ^ obtained by juxtaposing two copies of the net given in 
Fig. [T71 and let l be the net of Fig. [T5j Both nets have 2 free ports, and are thus comparable; 
furthermore, none of the two nets is total (l is not normalizable, ^ contains vicious circles), 
and we clearly have tJJ- and .^f|~. Now, non-totality has a quite singular behavior if compared 
to non-normalizability in the A-calculus, in that it is "resistant" to contexts: in fact, by 
the locality of interaction rules, neither active pairs nor vicious circles can be eliminated 
through interaction; thus, if /i is not total, so is C[/x], for any C. Therefore, we have t ~t ^, 
which proves that total equivalence is not semi-sensible. So the only possible relationship 
with the other known theories is ~ 5= ~t; we ignore whether this is the case. 

5.4. More open questions and further work. In Fig. [20] we graphically resume what 
we know about theories in the symmetric interaction combinators. A solid line represents 
inclusion, from bottom to top; a thick solid line represents atomic inclusion, i.e., there is no 
theory in between. The main open questions concerning Fig. [20] discussed up to now may 
be resumed as follows: 
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Figure 20: The lattice of theories for the symmetric interaction combinators. 

• Is ~ included in — /3r;£? (We know that the converse does not hold). 

• Is ~ included in --^t? (We know that the converse does not hold). 

• Does the lattice of consistent sensible theories have the cardinality of the continuum? 

• Related to the above question: do easy nets exist? 

The list does not stop here, though: there are a few more open questions about theories 
for the symmetric interaction combinators, and, more in general, about the mathematical 
objects presented in this work. 

In the light of the author's previous work on denotational semantics for the symmetric 
combinators |Maz07a] . and still drawing inspiration from the A-calculus, a first question we 
ask is: what about the theories generated by the models of the symmetric combinators? In 
particular, is any of the theories of Fig. [20] the theory of a model? Indeed, when we have a 
denotational semantics of the symmetric combinators (in the sense of Sect. 13. 3p . we auto- 
matically have a theory, given by denotational equality. Our full abstraction Theorems 14.141 
and 14.181 tell us for example that the theory of edifices and closed edifices is exactly = and 
~, respectively. What about the denotational semantics based on interaction sets |Maz07a] ? 
The examples we gave in that work can actually be shown to induce theories which are in 
between = and ~. However, we know that there exist interaction sets yielding fully abstract 
models for both of these theories; we prefer to keep this for further publication though. 

What about the other theories of Fig. 1201 .'' In the A-calculus, no non-syntactic model 
whose theory is (3- or /3?7-equivalence is known. Ongoing work by Berline, Manzonetto and 
Salibra [BMSOT^ IBMS09] suggests that there is a good reason for this: there is a sort of 
duality between the complexity of certain classes of non-syntactic models of the A-calculus 
and the complexity of the A-theory that they generate: in particular, for such classes of 
models, recursively enumerable theories like /3- or /3r/-equivalence may be obtained only by 
non-recursively-enumerable models. Of course we have no formal reason to believe that a 
similar phenomenon takes place in the case of the symmetric interaction combinators, but 
we suspect that finding non-syntactic fully abstract models of ~^ and ~/3,, is not an easy 
task. 
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The situation may be different for (or — /Srye)- Fig. [T9l shows that there exists nets 
such that /.fi 9^^£ ^2 and yet ax*(/ii) = ax* (^2)1 so any semantics based on simply collecting 
observable axioms will not work. What would be needed is an additional structure to ax*(/i), 
which takes into account the causal relationship between observable axioms. For instance, 
we may think of endowing ax*(/x) with a poset structure, in the style of Winskel's event 
structures |Win82j : given f , G ax*(/i), j < r) iff ^ /_/ and V) G ax(/i') imply j G ax{fi'). 
For example, consider the nets /^i, /i2 of Fig. [T9l The observable axioms generated by these 
two nets fall within one of two categories: those based at free port 1, whose addresses we 
denote by j:}, ^2, • • ., and those based at free port 2, whose addresses we denote by , • • •• 
Then, the structure of ax*(/ii) as a poset would be < ff < ?2 < ?2 < ' ' ' > while the 
structure of ax*(//2) would be yf < f ]^ < y^ < P2 < ' ' ' > which is enough to tell the two nets 
apart. We have not yet attempted to formalize these ideas, but we believe them to be a 
promising direction of research to obtain a full abstraction result for (or — /jrje, which 
is perhaps more feasible — again, in the A-calculus, no non-syntactic model is known whose 
theory is Ti, which corresponds to our — /je). 

Of course, there is also the question of semantically characterizing Fernandez and 
Mackie's w. We currently have no clue about this question, but if, as we discussed in 
the end of Sect. 15.11 this equivalence is akin to whnf-equivalence in the A-calculus, then 
we may be facing a difficult problem: in the A-calculus, no full abstraction result exists at 
present for such equivalence. 

Concerning edifices, an aspect which should further be explored is their connection with 
games semantics and traced monoidal categories. Indeed, the trace operation on edifices is 
strikingly reminiscent of the notion of "composition and hiding" for composing strategies 
in games semantics, trace sequences representing plays. One may wonder whether the set 
of edifices presented in this paper can be seen as some sort of "reflexive object" in a traced 
monoidal category of edifices. This would be quite interesting, because it would open the 
way for introducing a typed version of the symmetric interaction combinators: types would 
be modeled by the objects of this category, and the set of edifices introduced here would 
appear as a special type capable of modeling untyped nets (in the context of the A-calculus, 
this would be like an object D in a Cartesian closed category such that D ^ D is a retract 
of D). Such considerations also bring forth the question of what is a categorical model of 
the symmetric interaction combinators, a question for which we have some clues, but which 
is still unsettled. 

Finally, there is the intriguing possibility of using edifices as the basis for defining 
new non-deterministic extentions of the symmetric interaction combinators, or modeling 
existing non-deterministic systems. What we have in mind is something in the vein of 
Ehrhard and Regnier's differential interaction nets |ER06j . In fact, as soon as one considers 
non-simple edifices (c/. Definition 13. 4p . several non-deterministic phenomena emerge: arches 
may superpose, i.e., they may share a pillar, which is reminiscent of additive slices in proof 
nets, or in differential interaction nets; and trace sequences, which represent computational 
paths in nets, are no longer uniquely determined by the arch they generate (Lemma 13.91 
fails). 
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Appendix A. Invariance of the Trace 

This appendix is devoted to the proof of Proposition 13.131 which we recah below: 
Proposition 13.131 Let fj, — >^ /i', and let fi = cr[i^] and fi' = cr'[z^'] according to the 
Decomposition Lemma \l.b\ Then, Tro-(2(z^)) = Trfji[(t{v')). 

The result is basically a corollary of the following: 

Lemma A.l. Let v and a be resp. the cut-free net and feedback drawn below: 

: u„ : 
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Then: 

(1) if a = P, and if u' and a' are the following cut-free net and feedback 



then Tt^>{u') = Tr^(z^); 
(2) if a ^ f3, and if u' and a' are the following cut-free net and feedback 
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then Tv^'{i^') = Tro-(i^); 

Proof. The proof is a bit technical, and not very interesting. We shall only address point 
(2), point (1) being analogous and technically simpler. We assume a = 5 and (3 = C,, the 
other configuration being perfectly symmetric, and start by showing the inclusion Th:„{v) C 
Let s = {uk @ik ^ Vk @ jk)i<k<n be a trace sequence of along o", such that 
ii dom a. We shall build by induction on n a trace sequence s' = {u'f^ @ z'^ ^ v'f,@ j'k)i<k<n' 
of <^.{v') along a' such that: 

• u'^ @i'i = ui@ii; 

• v'^i @j'n' = @jn in case jn domtj, i.e., in case s is visible; 

• otherwise, j„ is one of the free ports denoted by pi,P2 in the above picture of a-[i^], and Vn 
is of the form thW, where 1 < /i < 4 and ti = 1, t2 = 1, ^3 = 1 (8) p, i4 = 1 q, the 
value of h depending on the cell and auxiliary port "used" by the observable axiom/path 
of u inducing s^. In that case, s' will be such that v'^, ©j'^i = w@qh, where qh is one of 
the free ports of v' as shown in the picture of point (2). 

It is obvious that the above is sufficient to prove the inclusion, because a visible trace 
sequences s yield a visible trace sequence s' such that 0(5') = a(s). 

The base case is n = 1, in which s consists of a single arch u@i ^ v@j. j ^ dom a, 
then j is a free port of cr[i'], and 5 is also a visible trace sequence of along a', so we 

take 5' = 5. Otherwise, j E {pi,P2}, and v = t^v', with 1 < < 4 and t^ as described 
above. In this case, the sequence s' is defined to consist of the sole arch u@i x iSi y @ Qh] 
this is clearly in C;(z/'), and s' satisfies the desired requirements. 

Let now n > 1. We write s„_i = ^ Vn-i@jn-i, and observe that jn-i € domo", 
because of the chain condition. Then, we have jn-i G {pi,P2} and Vn = t^w for some 
w C X C and 1 < h < 4, with t^ is as described above. We shall assume h = 1; the 
other three cases are perfectly similar. So we have jn-i = Pi, and the chain condition 
forces in = a{jn-i) = P2, so s„ is of the form su@p2 ^ Vn@jn for some u ^ C x C and 
s G {1 (8) p, 1 (8> q}. We make the choice s = 1 ® p, the other cases being again analogous. 
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So, to resume, we know that the last two arches of s are of the form 

5n-i = C ^ px'^yQpi, 

5n = x' ® py' @P2 ^ Vn@jn, 

for some x,y,x' ,y' G C and (z V; observe that the match condition imphes x' = px and 

y = py'- 

Now, by the induction hypothesis apphed to 5i, . . . ,s,i_i, we know how to build a 
sequence s' = (u'^ ©''''k ^ "^k @Jfc)i<fc<n' such that u[ @i[ = ui@ii and such that the last 
arch is of the form 

s'n' = ^' X (g)y@qi 
Remark that (j'{qi) = qs, cr'{qQ) = q^, and that 

x" (g) py" @qs^ px" ® y" @ 96 G 
for all x" ^y" G C. We now have two possibilities: 

• in domcj, i.e., j„ is a free port of cr[i/] and (j'li'']- In this case, Sn G implies 
x' ®y' @q-i^ Vn@jn G 

• jn G dom cr, which implies j„ G {pi,P2}- We assume jn = Pi, again the case j„ = p2 
being perfectly similar. Then, we have Vn = pz <^ z' for some z, 2;',G C, which implies 
x' ^y'@q3^ ziSiz'@pi G ^{u'). 

Then, define 

s'n'+i = X (g> py' @qs ^ px ^ y' @ qe, 

and 

^n'+2 = X ®y @qz ^Vn @jn 

in case jn dom a, and 

^'n'+2 = x' (g) y' @q3 ^ z ^ z' @pi 
in case j„ G domo". In both cases, by the arguments given above we have ^n'+iJ^n'+2 ^ 
and {5k)i<k<n"+2 is a trace sequence of ^(z^') along cr' satisfying the desired require- 
ments. 

We are left with proving that Tia-'{^{^')) ^ Tro-(3;(i/)). We use a similar argument, but 
this time we build a trace sequence 5 of ^{v) along a only starting from a trace sequence 
s' = {u'^ ^ v'f^@ jX)i<fc<n' of f^iu') along a' such that j'^, {gs, ge, 97, Qs} (the induction 
is on n'). This will be enough for the inclusion to be proved, because visible trace sequences 
of along cr' do not end with any of those free ports of z^', as they are not free in cr'[zy']. 

The sequence 5 = (■u^ @ik Vk @ jk)i<k<n will have to satisfy the following: 

• ui@ii = u[ 

• Vn@jn = v'^i if j'^, ^ dom cr', i.e., in case s' is visible; 

• otherwise, we must have j'^, G {qi, q2,Q3, Qi}', then, s will satisfy Vn @jn = sv'^i @pi with 
s = p (g) 1 (resp. s = q (g) 1) if j'^, = qi (resp. j'^, = 52), or f„, @ j„ = sv'^, @p2 with 
s = 1 (g) p (resp. s = 1 (g) q) if j'^, = q^ (resp. j'^, = q^). 

The base case is n' = 1, in which s' consists of exactly one arch u'@i' ^ v' and 
obviously j' {gs, q^, q7,q8}i because i' ^ dom cr'. If j' dom cr', we take s = s'. Otherwise, 
supposing j' = qi, we take 5 to be made of the sole arch n' @i' ^ (p g) l)v' @pi; the other 
three possible values of j' are handled similarly, prefixing v' with qg)l,lg)p, lg)qas 
appropriate. 

Let now n' > 1. We put j = j'^,, and observe that, by j ^ {?5, 965 97) Qs} and by the 
chain condition, we have i'^, G {qi,q2,Q3,Q4:}- We have again four cases; as above, each 
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time we shall have a choice in the sequel, we shall analyze only one arbitrary case, all cases 
being easily recoverable every time from each other. So we assume, for instance, i'^, = qi. 
We have = ^'(ft) = Qs, so s'^i_i is based at q,q8, where q € {(?5,(?6}; in both cases, 

q is not a free port of cr'[i/'], so the sequence must contain a previous arch of the form 
5^,_2 = S,' ^ v'@q', with q' £ {qi,q2,Q3,Q4}- We choose q = q& and q' = qs, so we can 
write, by using the match condition, that the last three arches of s' are of the form 



for some x, y, x', y', x" , y" (z C, v £ C xC, and £ V. Furthermore, by the match condition, 
we know that x = px' , y = y' , x" = x' , and y" = py'. If we apply the induction hypothesis 
to the sequence s'^, . . . ,s^/_2i we obtain a sequence s = {ui @ii ^ Vn @ jn)i<k<n satisfying 
all the requirements mentioned above; in particular, we have 

Sn = ^' ^ X ® py@P2- 

Now, suppose j G dome'; we choose for example j = qi- In that case, define 

5„+i = px" (g) y" @59i (q (g) l)v@pi. 

Otherwise, j is a free port of cr'[i'']; then, we set 

5n+i = px" y" @ pi j. 

In both cases, it is easy to see that Sn+i € and that Si, . . . ,s„,s„+i is a trace sequence 

of along cr, which is visible iff s' is. □ 

To prove Proposition 13.131 observe first of all that trace sequences never use e cells, 
so the only interesting interaction rules are those addressed by Lemma lA. II Then, we can 
always write (7[u] = cri [(To[i^]], where (7o[i'] is of the form given in Lemma lA.H similarly, we 
can write ct'Ii/'] = ci[o"q[i^']], where o"q[^''] is of one of the forms given in point (1) or (2) of 
Lemma lA.H depending on whether the interaction rule is an annihilation or commutation. 
Note that cJi, do and ai, cJq are disjoint feedbacks. Then, by Lemma lA.ll and the associativity 
of the trace (Lemma 13. Sp . we have 




^ ^ x(^y@q3, 
px' (S>y' ©qe ^ 
x" y" @qi^ 



x' i^py'mqs, 
v@j, 



Tr.((2;H) = Tr., (Tr,„ (C:(i.))) = Tt^,{Tv^,(^{u'))) = Tv^>{<B{u')). 
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